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Mr. Sherman Frankel 
Professor of Physics 
University of Pennsylvania 
School of Arts and Sciences 
Department of Physics 
David Rittenhouse Laboratory 
Philadelphia, PA 19104-6396 

Dear Mr . Frankel : 

This letter responds to your November 16, 1992, Freedom of 
Information Act (FOIA) request. 

Due to the size and complexity of the Department of Defense 
(DoD) , there is no central repository for all DoD records. This 
Directorate is responsible for responding to requests for records of 
the components of the Office of the Secretary of Defense (OSD) and 
Joint Staff ( JS) , including ARPA. The several Components of the DoD, 
including the Military Departments, Unified Commands and separate 
Defense Agencies, operate their own Freedom of Information offices to 
respond to requests for records for which they are responsible. These 
procedures are provided in DoD Regulation 5400. 7-R, as published at 32 
CFR 286. 

Your request was processed by the Office of the Assistant 
Secretary of Defense for Command, Control, Communications and 
Intelligence (ASD(C3I)), which had provided the enclosed document 
as responsive to your request. After extensive consultation with 
other Agencies, including the Department of Energy, Defense 
Nuclear Agency and Information Security Oversight Office, Mr. 

Nathaniel Cavallini, the Deputy Assistant Secretary of Defense 
for Plans and Resources, an Initial Denial Authority for 
ASD(C3I), has determined that the release of portions of the 
document must be denied pursuant to 5 USC 552 : 

-(b) (1), which applies to material which is currently and 
properly classified in accordance with Executive Order 12356. In 
this instance, some of the denied information is classified 
according to Section 1.3(a)(1), concerning military plans, 
weapons or operations; 1.3(a)(2), concerning the vulnerabilities 
or capabilities of systems, installations, projects or plans 
related to the national security; and 1.3(a) (6), concerning 
scientific or technological matters relating to the national 
security. Additional information which is unclassified when 
standing alone has been denied as classified in accordance with 
Section 1.3(b), concerning information, the release of which in 



the context of other information reasonably could be expected to 
cause damage to the national security. 

-(b)(3), which applies to information specifically exempted 
by a statute establishing particular criteria for withholding. 

In this instance, the statutes are 10 USC 128, which provides 
authority to withhold unclassified special nuclear weapons 
information, and 42 USC 2161-2168, which provides authority to 
withhold information regarding atomic energy, restricted and 
formerly restricted data under the Atomic Energy Act if 1954. 

You have the right to appeal the decision to deny this 
information. Any such appeal should offer justification to 
support reversal of the initial denial and should be forwarded 
within 60 calendar days of the date of this letter, to: 

Office of the Assistant to the Secretary of 
Defense for Public Affairs 
Directorate for Freedom of Information 
and Security Review, Room 2C757 
1400 Defense, Pentagon 
Washington, DC 20301-1400 


There chargeable costs for processing your request have been 
waived in this instance. 


Sincerely, 


D. J. Blakeslee 
Acting Director 
Freedom of Information 
and Security Review 

Enclosure : 

As stated 
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ArRONYMS USED IN THE 

NTTr.T.RAR FATLSAFE AND RISK REDTTCTTON REPORTl 
Coded Control Device 

Commander-ln-Chief of a UnlHed or Specified Command 

Department of Defense 

Department of Energy 

Emergency Action Message 

(Nuclear) Failsafe and Risk Reduction 

Intercontinental Ballistic Missile 

(U.S.) Nuclear Command and Control System 

Permissive Action Link (a CCD in a warhead) 

Personnel ReliabUity Program 

Submarine Launched Ballistic Missile 
Strategic Ballistic Missile Submarine 


UNCLASSIFIED 

TABLE 1 


• See Appendix for a glossary of Nuclear Command and Control System 
Terms. 


1 


TOP SECRET - FRD “ NOFO RN WNINTELr 


TOr OECRET ■ FRD NOFORN WNINTEfr - 


PREFACE (U) 

(U) On December 20. 1990. Secretary of 

measures to enhance failsafe features, to ad^W^^ 

was specifically tasked to explore the des ^ ^ desirability and 

coded control devices on U.S. nuclear weapons at . n^-igar weapons 

'r^"Ko«isJd ig^st o^ci^^s;ras“ “t‘* 

technological breakthrough, or deliberate act. The penoa 
stated as 1991 to 2011. 
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executive SUMMARY (U) 


(U) BACKGROUND 
4G)- 





: - 




(U) The Advisory Committee's study proce^ Pnirimittee 

various Working and Study Groups visited many ^ 

" Sa[ thllnforma Jn genSane to the revi™ 
completely understood. When questions were raised or the neea lo 
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approval. 

(U) Three mechanisms ensured 

balanced perspective by the Working and Study * Advisory Committee 

from leadfcg luthortUes 

?S^soVcorSte??~nce on receivmg ajy ^ews on aU 

issues ^d reports offered by the Working and Study Groups. 

ful Changes in the last five years and especially the dramatic changes 
stoce the?o^Sln oftois Advisory Committee have led to redu^ons to toe 
historical threat which has shaped U.S. “SS^«e 

to increase the failsafe characteristics of the NCCb. 

(U1 The threat of a massive surprise attack on the U.S. its allies in 
the nreseto lerarity environment has virtually disappeared However ^ 
weU-Ked toSL been replaced by a more d" ^1“"^ 
threat environment. This fluid security environment is ^aractenzea Dy 
Mtential instabiUty in Russia and other states with 

L-senals as well as by the accelerating proliferation throughoi^ the Mrd 
World of nuclear weapons technology, other weapons of mass destruction 
^d tiie meSi^^^^^ delLr them. Moreover, we are increasin^y aw^e of the 
limited effectiveness of measures to detect, check and rwerse &is 
dangerous proliferation which is fueled by the spread ctot#»= nf 

advanced technology as well as by the commitment by Third World states 

substantial resources to obtain these weapons. 

(U) Nuclear proliferation takes on increased importance in long-term 
II S security concerns as the primacy of the East-West nuclear 
confrontation subsides. The shift away from a bipolar world is , 

more fragmented and unpredictable system. New international and regional 

S:tors isiue^ and threats should be addressed as we develop relev^t 

d?cmA«?mocldures. force capabUlUes. and insUtuUons capable of de^ng 
with a wider range of threats, some of which may spring from new nuclear 
powers that oppose the United States. 

(U) FUTURE THEMES 

fill The changing environment occasioned the need to reassess the 
overall NCOS and the existing balance between the often competing assure 
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ffoals. This environment also provided toe backdro^ag^st 
which the Ad^sori^“Committee considered near- as 

procedural, and technological iniUatives ^d Based 

new nuclear failsafe and risk reduction challenges and opportutotie . 

Spon toe e^d^g security environment, the Committee concludes that four 

coherent “themes" should shape toe future NCOS. 

• (U) We will continue to rely upon nuclear 

element of our deterrence poUcy. ;^erefore. '2 

number of weapons that remain in toe active sto^pile. toe 
maintenance of appropriate nuclear weapons safety, security and 
S^ol should remato one of toe highest priorities for re^urce| 

The reduced sense of immediate threat should nd be 
Xw existing nuclear weapons safety, security and control measures 
to deteriorate or planned improvements to languisn. 

• (U) It is appropriate that we continue to enhance pditive 
measures whidi strengthen safeguards 

inadvertent use. These enhancements should be pursued In a time 
phased manner as resources permit. 

• (U) We should continue to ensure that U.S. nuclear ^ 

resDond effectively and in a timely manner to Presidential direction. 
V^le we strive to improve the failsafe characteristics of our nuclear 
forces and adopt additional safeguards to reduce toe nsk of nuclear 
war. toe U.S. should recognize toe nnpredictabiUty of ^ 
international security environment and toe fact toa^u^ent 
promising relations and trends could deteriorate. The U.S. should 
Undertake no initiatives toat are irreversible or that irrevocably 
foreclose options and flexibility to toe President. 

• (U1 Finally, requirements for timely and accurate intelligence 
community assessments of toe capabilities and intentions of current, 
new and emerging powers possessing or pursuing weapons of mass 
destruction will increase. 

(U) OVERALL NCOS ASSESSMENT 

(U) The NCOS, which has evolved over toe last five decades, reflects 
toe United States* continuing goal of assuring toe highest standards of 
nuclear weapons safety, security and control. NCOS procedures, 
technologies, and equipment have been developed and personnel highly 
trained to assure toe responsive, effective, and efficient conduct oi , 

m!thorized nuclear operations. At the same time, numerous, redund^t ^d 
mutually reinforcing layers of safeguards and positive pleasures addressing 
all aspects of the weapon life-cycle have been developed to ensure that 
unauthorized or inadvertent use does not occur. 
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(U) The Department of Defense (DoD), with extensive support from 
the Department of Energy (DOE), allocates significant attention, talent, 
resources to maintaining effective safety, security, and consol oi nuc 
weapons. Both departments are responding to recommendations ot 
previous high-level panels in the areas of safety (i.e.. DreU. Moe. and Cl^K 
studies) and security and control (Joint Chiefs of Staff Nuclo^ 
and Control Study, i.e.. the Horton Report). For inst^ce. , Pf 

have formed a Joint Advisory Committee on Nuclear Weapons Surety to 
advise the Secretary of Defense and the Secretary of Energy on matters 
related to protecting against inadvertent nuclear detonation or pluto^um 
scatter. These efforts are contributing to the multi-layered system of 
safeguards and controls. Furthermore. DoD and DOE 
President’s September 1991 and January 1992 Nuclear 
themselves were a response to the radically changed s^urity et^onme 
and are making their own positive contributions to safety* security ana 
control. These actio ns, along with other lonper-ferm Initiativ^g. ?re 
the rmele'^stnpknile and our nuclear forces safer and more secure. part 
of its review, the Advisory Committee worked closely 

offices and identified areas requiring improvements. Action is already being 
taken in many of these areas by appropriate agencies. 


(U) 


FAILSAFE AND OVERSIGHT ENHANCEMENTS ARE POSSIBLE 


(U) Nevertheless, in light of the evolving security context ^d 
technological advances, important additional enhancements ^e feasible to 
strengthen all layers of the existing safeguards ag^nst unauA 
inadvertent use. These potential enhancements, identified in the body of 

this Report, include: 
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(U) RISK REDUCTION ENHANCEMENTS ARE POSSIBLE 

(U) The demise of the Soviet Union and the accelerating proliferation 
of nuclear weapons technology and associated means of delivery present the 
U.S. with significant nuclear risk reduction opportunities and challenges. 

In addressing these complex issues, we should balance responsiveness to 
today’s opportunities with prudence that reflects the highly uncertain and 
changeable nature of tomorrow’s security environment. For this reason, the 
Advisory Committee recommends the development of several risk reduction 
measures that deal with the range of scenarios the U.S. may face in a 
proliferated world. 






• (V) The establishment of govemment-to-govemment 
communications designedfor contingency use by heads of state or 
governments to assist in nuclear weapons accident notification and 
other areas of crisis management; 


• (U) The encouragement of bilateral and regional risk reduction 
measures by nations in areas of greatest proliferation concern; and 


• (U) Transfer and/or exchangCf in appropHate coses* of nuclear 
weapons scfety technology* use control/denial conceptSf and 
physical security concepts and technologies. 
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key nuclear failsafe and risk reduction issues and 

RECOMMENDATIONS (U) 

(U) This section identifies the key nuclear failsafe 
issues and sub-issues investigated by the Ad^dsory 
its significant findings and recommended enhancements 
issue, and Usts the FARR Final Report’s recommendations by issue. 

(U) Following initial review and research, the Advisoty Committee 
formulated six major issues to support its investigation of me NCCS. 
Working and Study Groups were then assigned to assess each issue. Based 
upon the results of this detaUed assessment, specific sub-issues were 
Sed appropriate for further investigation. Both the overaU issues and 
specific sub-issues are listed below. 
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fS)- SUB-ISSUE 
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(U) ISSUE 3: NCOS SAFETY, SECURITY AND CONTROL ? 

(U) Are current DoD procedures, equipment, and facilities adequate to 
maintain the required standards of nuclear weapons safety, security, and 
control under the full range of stockpile conditions? (Page IV-52) 

(U) Advisory Committeej^ignificant findings: 

• (U) The layered approach of personnel actions, procedures, physical 
security safeguards, and nuclear weapons design features effectively 
maintains positive control over nuclear weapons. The combination is 
important since no single factor can be. made perfect. 

• CU) Loyal and capable personnel compose the most important layer 
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(U) Advisory Committee key enhancements: 

. (U) Continue to support the highest personnel reUability standards. 


• fU) Maintain appropriate plans and effective procedures to support 



(U) SUB-ISSUE 3-1; PERSONNEL RELIABILITY 


(U) Issue 

(U) What enhancements should be made to the DoD Personnel 
Reliability Program to provide the required level of protection to nuclear 
weapons? (Page IV-56) 

(U) Recommendations 

• (U) Maintain strong continuing commitment to the highest 
personnel reliability standards. Specifically maintain a vigorous 
Personnel Reliability Program (PRP)for DoD and contractor personnel 
involved in all aspects of nuclear command and control (weapons 
handling, maintenance and transportation, software readjwrxte acce^, 
controV access to nuclear command and control code material, etc.;. 
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- (ID Continue mgorous opporfrton foment 1 ^^^ 

certain background questions on DD Fo QOfl.2 fDoD 

those personnel assigned if litigated 

iDith wees responsibilities. 

. (ID IW personnel assigned to the NCOS 

positions." 


(U) SUB-ISSUE 3-2: | 
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SUB-ISSUE 3-4: 
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(U) Advisory Committee key enhancements: 




ES-22 












ISSUE 5: RISK REDUCTION 

(U) Issue 

(U) What confidence-building and predictability 
sharing of appropriate technologies, systems. 

Should be iinplemented to reduce the risk of nuclear hosblities with any 
power? (Page VI-4) 

(U) Advisory Committee significant findings: 

• fU) There is a growing mutuality of interests in risk reducUoii ^d 
the safety, security and control of nuclear weapons between the U.b. 
and Russia. The U.S. and Russia have conducted substantive discussions 
on a wide range of nuclear command and control matters. 

Furthermore, an opportunity of uncertain duration exists to achieve 

these objectives. 

• (U) The U.S. is already engaged in many bilateral and multilateral 

risk reduction initiatives. 



• (U) The U.S. should consider the transfer of selected technologies 
and information that could reduce the possibility of a nuclear detonation 
if such transfers do not degrade U.S. non-proliferation objectives, 
enhance the operational effectiveness of the recipient nation, or 
jeopardize the U.S. Nuclear Command and Control System. The DOE 
national laboratories can play a key role in this process. 

• (U) Risk reduction initiatives should, go beyond traditional arms 
reduction agenda. 

(U) Advisory Committee key enhancements: 

• (U) Establish nuclear weapons incident multilateral consultation 
agreements. 

• (U) On a case-by-case basis, transfer selected nuclear weapons 
system safety, security and control technologies that are consistent th 
the full range of U.S. security objectives. 
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. (U) Pursue new dialogues and iniUatives 
Soviet republics, and emerging powers, including joi 
reduce proliferation and to provide timely warning. 

T?prnmmendations 

. (U) Expand appropriate bilateral and regional inflation exch^ 
and r^reduction noeosures with nations in areas of greatest 
proliferation concern, 

. (V) Establishmurnata-alagreementsforconsmltaaon^^e^^f 

a nuclear loeapons incident. These measures woidd rely on tunely and 
assured communications. 








• (U) Establish crisis communications capabilities among appropriate 
nations of a region. 

. (U) Transfer and/or exchange, in appropriate c^es. nuclear weapon 

reduce the risks of an accidental or inadvertent nuclear tueapon 
?^onL‘on.~au4oHzed use. or acts 

misinteroretation. miscalculation, or hostilities. This transjer ana/or 
excha^ should be conditional on mechanisms that ensile this 
information does not degrade efforts to prevent the prolifercUion of ^ 

niclear weapons, enhance the operational ^ S^nucSoI*^” 

nation/s). or%opardize the safety, security or control ofU.S. nuclear 

weapons systems. 

• (V) The National Laboratories can play a distinctive and important 
role in the process of determining appropriate technologies, 
procedures, systems and system data to consider. 

Former Soviet Union (U) 
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. (U) Establish government-t(ygovemmentcomiminic^^T^,d^^^ 

for contingency use by heads of state, for states 
Union with which the United States has signed START a^^men^ 
and/or those with which we wish to establish nuclear weapon accident 

response notification agreements. 

• (U) To exploit the current window of 

reductioT^at now exists with Russia and the republi^ ^ 

Soviet Union, the United States should move 

arms reduction agenda and pursue new initiatives. (DoD is already 

pursuing many of these initiatives.) These areas include. 

- (U) Joint measures (e.g., intelligence sharing to reduce 

proliferation; 

•• (U) Joint initiatives to provide timely warning: 

— (U) Overview ofU.S. and Russian/Commonwealth of 
Independent States command structures; 

— (U) A lexicon on command and control terminology 

would support future cooperative efforts and confidence building 

measures: 

•• CU) A dialogue on nuclear command and control oversight, 

command and control assessment techniques, an^c confrol 

policies and standards with the aim of improving^th 
Command and control capability to prevent unauthorized launches, 

cold 

— (U) Discussions on early deactivation of forces to be reduced 
under signed agreements. 


People’s Republic of China (U) 



Undeclared/Emerging Nuclear States (U) 


• (U) Consider a Multilateral Nuclear Incidents Agreement, open to all 
nations, patterned after the U.S.-USSR •Accident Measures and 
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'Prevention of Nuclear War^' agreements, and 

respect to possession/development of nuclear we P- V 

attractive risk reduction model for this category of 


(tJ) ISSUE 6: 



(U) Advisory Committee significant findings: 











CHAPTER ONE 

THE SCOPE, STRUCTURE AND PROCESS OF THE 
FARR INDEPENDENT REVIEW (U) 




(U) Over the course of its invesUgation. the Advisory Committee’s focus 
broadened, consistent with its charter, to address related issues (e.g., the 
role of coded control devices on all future weapons /weapons systems and 
the level of protection they should afford). Also, the failsafe aspect of the 
charter made it necessary to- assess all aspects of the current and 
programmed NCCS which is enjoined to meet the dual requirements o j 
assuring the authorizpfi urp of nuclear weap ons while assuring against their 

unauthorized or inadvertent use . National guidance mandates an 

1 

• Note to the Reader: A full listing of acronyms contained in this Report 
appears at the beginning of this document. 
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balance between these someUrhes competing objectives. 

on toe latter could have resulted In undermmmg toe 

the President to the individual weapons systems. 

(U) The Committee also recognized that the 

to our ability to deal with the emerging world. 



(U) ISSUES INVESTIGATED 

fTTl Table 2 lists the broad organizing issues that evolved ^er the course 
of toi review to focus and direct FARR analytical initiatives TTiese general 
Issues cave rise to the many related sub-issues which are idenhfied 
discuss^ed throughout this Report and in its supporting Appendices. 


(U) 


THE STRUCTURE AND PROCESS 


fU) Figure 1 identifies the structure of the F^ review 
The three Working Groups, five Study Groups and 
brought together a level of talent that is unprecedented in a 
Sand Ld control review. More than 150 

offices within the Office of the Secretary of ^ (DOE1 the National 

the Joint Staff, DoD Agencies, the Department of 

Laboratories, and the Intelligence of 

Because of the high priority assigned to the FARR review by the Secretary oi 
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miTtAI. KEY mirT RAtt FAILS AFF, AND RISK RTmTCTIOW ISglj ES 

1. Failsafe and Positive Measures 

• What NCCS vulnerabilities exist 

strenethenDoD positive measures to prevent accidental, inadveitem. 
wSe^Ssurlng authorized use of nuclear weapons? 

. Should the united States 

future nuclear weapons systems? If so. what types of devices ana 
systems? 

are required? 

. Are current DoD procedures. 

required standards of nuclear weapons safety, security, and comro 
stockpile conditions? 

2. NCCS Oversight 

• “-ifr » ' 

nuclear weapons safety, security, ana com ^ ^ Qur ability to prevent 

w mtSvSuifS nf clear weapans? IT so. what should be Included In this 

policy? , 

. What measures should be taken to approve oversight of the Nuclear Command and 

Control System (NCCS)? 

3. Risk Reduction 

iXfmfnS of nuclear hostUlUes with any power? 

. Given the dmmaUcally 

measures should be taken to j .g frovided with sufllclent accuracy and 

informauon on nuclear weapons ‘ ° AddlUonally. what 

fSiSfmn S SSdeS- w'elfo otfer weapons of mass destruction, and advanced weapons 

technology? 

. UN CLASSIFIED 
TABLE 2 
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Defense, the Committee recruited and ^ ^ experts and most 
organizations' leading nucle^ comm^d ..jn^ency and the DOE 

innovative thinkers. The Defense signfficant resources to 

iSidia National Laboratories dedx^^^^^^^ substantive 

this project and. along wi^ the ^rse ^^is 18 month effort, 

contributions to the FARR Review. in United States and 

(U) The Advisory Committe^ ®ComrnltterrecS?ed^fwnm^ 
objectivity, and thoroughness. control, risk reduction. 

SnWs on all aspects of <=^“fec“d toSt. Furthermore, the 

non-proUferatlon. ^e current Working and Study Groups 

Committee, its Study Staff, and/ United States and Europe to 

visited many installaUons and current and 

ensure that oU "uhon ^rtnane^^^^^ „„d for 

completely understood. When ^ fniinw-uo briefings or visits were 

addiuonal information o' nertod?cally presented potential 

made. Each Working Recommended 

SSce'Snm wVe Sfied forte Committee's evaluaUon and approval. 

(U) Independence of analysis ^d a bSflngs to^te”"^*^"^ 

ref sS?gS— |i „„ aU 

fss"fr4"o“ere°d"by the W«orkij;g and Study Groups. 

^f‘c?';ud''g?me"rrecfmf^^ -ith which they are assocated. 

(U) The committee enjoyed c>^cellent cooperaU^Jrom 

nuclear command and conttol *commltte^ identified areas of 

investigation. In means for improving the system in 

=e®^1nWf^ - f eVd'/h^inrmP'cniented. 


CHAPTER TWO 

THE EVOLVING SECURITY ENVIRONMENT: 

NEW THREATS, CHALLENGES AND OPPORTUNITIES (U) 












CHAPXCR THKEE 
U.S. NUCLEAR COMMAND AND 

FAILSAFE AND RISK REDUCTION MEASURES OVERVIEW (U) 



(U1 The variety and complexity of the warheads and weapons systems, 
as well as of the deterrence and potential warfighting mis^ons they should 
perform, have evolved over a period of almost 50 ye^s. 
which these weapons are controlled has also evolved, sometim g 
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riissimilar lines dictated by service, theater, or operational j 

but driven always by the dual requirements result o ^ 

hv the President while a ssuring ag ainst unauthorized , Control 

this evoluUon has been the development of a Nuclear Command an 
System that is large and complex. 


(U) FAILSAFE MEASURES 

(U1 A combination of procedures and design features contribute to ^e 
comm^d ^d control of United States nuclear weapons. This combination 

includes: 


Positive Measures to Assure Authorized Use, and 
Positive Measures to Assure Against Unauthorized Use. 


fUl This combination of procedures and design features supports the 
execution decision process and provides safeguards against unauthorized use 
for all elements of the nuclear comn^d and control 

sndlso support the day-to-day deterrence posture 
of both United States nuclear weapons and the nuclear commar^ 
control system. They are interlocking, with features of each mnuencm the 
performance of the other. Together, they Pro^de a layered 
protective features to support Presidential authority and the assure-assu re 

against balance. 







(U) POSITIVE MEASURES TO ASSURE AUTHORIZED USE 


(U) As described above, the United States nuclear stockpile consists 
of various weapon systems over which Presidential authority, while having 
the same fundamental command and control requirements, may be 
implemented in different ways. The most time-urgent of these weapon and 
nuclear command and control systems are those of the strategic deterrent 
forces on day-to-day alert. For ^is reason, this description will begin with 
the alert strategic forces. The failsafe measures that are in place to prevent 
inadvertent or unauthorized use are summarized in Table 3 and described 
below. 






TABLE 3 
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fiTRAJPGIC FORCES EX Ff^UTION DFCISION PROCESS 



FIGURE 2 




fin In addition to the nuclear command and control system features 
that LJnrp authorized us_e . an elaborate system of failsafe measures to assure 
apainst unauthorized execution has also been implementea. 
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(U) POSITIVE MEASURES TO ASSURE AGAINST UNAUTHORIZED USE 

tUl The preceding secUon described the proce^res and 
cryptographic features foUorrtng section 

measures that assure authorized use. 

(U) PnJCLEAR COMMAND AND CONTROL SYSTEM PERSONNEL 

(U) The first layer of protection against unauthorized use reste 
the lovaltv training, dedication and quality of the personnel involved. They 
thfundSCtags that ensure that the rigorous procedures used to 
SntoiUlng Uie execiluon process as weU as those used to pro^nde for toe 
safety security and control of nuclear weapon systems at toe force 'e™' 
effecUvely carted out. The NCOS Incorporates a series of quality assurance 
measures that develop, maintain, and continually assess toe person 
SstgnS to duties wlto nuclear weapgns and nuclear command and control. 

(U) PERSONNEL RELIABILITY PROGRAM 

(U) The Personnel Reliability Program (PRP) ensures ^at 
oersonnel of proper character are assigned to duty with 
Duty with nuclear weapons does not always entail having ^ 

or weapons systems, as is the case with crew members or mainten^ce 
oersonnel It also includes those individuals who are responsible for 
supporting the systems, such as those who are involved 

decision process, controlling the code documents and sealed aumenticators. 
or In prodding security for the nuclear weapon or critical equipme . 

(U) A member of the Personnel Reliability Program un^ 
stringent initial screening, including a thorough 

medical evaluation, and an Intensive training program rplatpd 

Sid cleared by the unit commander to perform nuclear weapons-related 
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duties. Once assigned to nuclear weapon-related duUe^^^ 
performance on the job and behavior, both on ^nd °ff me Job. 
continuously reviewed. If any reason emerges to doubt a 
or reliability, that person is immediately 

3e™TsX problem Is serious, the mdMdual is 

non-nuclear related duties. This action is admimstrative rather than 

punitive and can be accomplished quickly. 

(U) A key aspect of the Personnel Reliability Program is mat it 
requires me active participation of all of me individuals in it. B , . ^ 
w?rmSi^rs and co-workers are required to report ^y ch^ges in behavior 
or medical or emotional problems mat might affect me performance of 
individuals wim whom mey are assigned. Individuals are ,, 

voluntarily remove memselves from me program for such problems • 

For example, voluntary removal often occurs when a person is t^ng certain 
prescribed medications that affect alertness. Voluntary as well as 
temporary decertifications from the program allow an individual to rem to 
nuclear-related duties when any problems have been resolved. This 
voluntary decertification and recertification process has been very b^eficial 
in mat it encourages responsible actions by personnel wim temporary 
personal or medical problems, because they know mat voluntary 
decertification will have no negative impact on future assignments or career 

progression. 

(U) TWO PERSON POLICY 

(U) Personnel certified for nuclear weapon-related duties are Gained 
and indoctrinated into me Two Person Policy. This policy dictates mat no 
individual shall have sole access to a nuclear weapon, critical component, or 
critical nuclear command and control systems or material^ Dunng any 
operation when access is required, a minimum of two aumonzed persons 
must be present, each of whom is capable of detectog incc^ec or 
unaumorized procedures wim respect to me task being performed ^d 
famiUar wim applicable safety and security requirements, which include 
specific procedures to terminate such actions. These two individuals must 

be physically positioned where mey can detect any incorrect or , , 

imaumorized actions undertaken by me omer. The policy is enforced by me 
persons who constitute me team and associated security personnel during 
the entire time mey are performing meir task or operation until the time 
mey leave me area requiring me Two Person Policy. Execution of mis 
policy provides a failsafe measure against bom deliberate and inadvertent 
acts mat might have a negative effect on a weapon or omer critical 
component of me nuclear command and control system. 


ee) NUCLEAR COMMAND AND CONTROL SYSTEM SECURITY 

including nuclear weapons, y'd unauthorized use. As is 

assuring use when by the 

^h^Tcal »d iS^Uofsec”rtV ^ are often overlapping and 

synergistic. 



(U) PHYSICAL SECURITY 

rui All nuclear weapons are protected by extensive physical ^curiV 
II «im.. The tvnes of physical security systems employed vary the 
we"systS.sS?*L? Irt. storage, maintenance, or transportation 

Status. 















(U1 Pending changes In the Personnel FellablUty Program redect 

SMS 

authentication documents and equipment: personnel involved in the 

SS“s°”an"d TeTuriV pSnIl wh“ Sid have 

adverse impact on system performance fo"; 

command and control positions and. in addition to the normal stongent 
SS ome program, tvill be subjected to periodic counter- 

Intelligence scope polygraph^ examinations. 





1IM8 








QTnniCPrLE fiAinr/rv and use CONTROI^ DESIGN FEATURES 
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(U) ACCIDENT PROTECTION FEATURES 


(U) The U.S. nuclear weapons program has never experienced an 
accidental nuclear detonation. However, a number of weapon or weapon- 



111-21 



rriNTPOL FEATURES 



FIGURE 5 



TABLE 5 
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“S““b oth^ls“d ope*^ton"afges m the P™/^' 

there have been no accidents since 1968. 

(U) Design features that prevent aM 

Table 5. 

. (BoD UG N¥ 



(U) liUCLEAR COMMAND AND CONTROL PROCEDURES 


(U) In addition to the failsafe capabilities provided by 
and security programs and the design features incorporated into nuclear 
Capons Sd welpon systems, there are detailed and rigorous procedures 
prescribed for all operations involving nuclear weapons, weapons systems. 
Sid thrNCCS. me Emergency Action Procedures carried out by comm^d 
center and subordinate force personnel have , already been described in the 
discussion of the execution release process, mere are equally ri^gorous 
Operational Safety Rules, prepared for each nucle^ weapon system and 
approved by the Secretary of Defense, which must be /°l|owed in the 
conduct of any operation involving nuclear weapons. In a^.^^^on 
there are other procedures dealing with the Production, disteibution 
handling, and management of the positive control materials used in th 

NCOS. 


(U) 


NUCLEAR WEAPON OPERATIONAL SAFETY RULES 


(U) me Operational Safety Rules govern all aspects of operations 
involving nuclear weapons. The rules for a given nuclear weapon y 
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dictate the procedures to be used in its movement, storage, ^d _ 
mSSm^provide for Its securi^; ^ 

wiU specify both the equipment to be used In ^ Lnong 

are described below. 


-ts^- 





(U) At present, there are no nuclear-armed strategic bombers or non 
strategic dual capable aircraft on alert, nor are any sea-launched, nuciear- 
armed cruise missiles or nuclear bombs deployed at sea. 


rui 
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- (U ')- A seminal document supporting the assure against side of the 
balance is DoD Directive 3150.2: “Safety Studies and Reviews of Nuclear 
Weapon Systems". This DirecUve establishes the Nuclear Weapon System 
Safety Standards which define safety very broadly and, in fact, encompass all 
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failsafe measures that assure against unauthorized use. 
presented in Table 7. 


These standards are 


1 There shall be positive measures to prevent nuclear weapons involved 
in accidents, or jettisoned weapons, from producing a nuclear yield. 

2. There shall be positive measures to prevent DELIBERATE prearming, 
arming, launching, firing, or releasing of nucle^ weapons except upon 
execution of emergency war orders or when directed by competent 
authority. 

3. There shall be positive measures to prevent INADVERTEOT prea^ng. 
a^ng. launching, firing, or releasing of nuclear weapons in all credible 
normal and abnormal environments. 

4 There shall be positive measures to ensure adequate security of nuclear 
weapons, pursuant to DoD DirecUve 5210.41 (Security Policy for Protecbng 

Nuclear Weapons). 

UNCLASSIFIED 

' TABLE 7 


(U) Consistent with the requirements of DoD Directive 3150.2. each 
military Service conducts nuclear weapons safety studies and recoirmends 
soecific Operational Safety Rules for each nuclear weapon system. These 
studies are undertaken during weapon development, prior to deplo^ent. 
and periodically during the system's operational life. A special safety s^dy 
is imdertaken each time the system is to be modified or a significant change 
in operaUonal procedures is to take place. These studies examme all 
aspects of the weapon system for the purpose of identifytag necess^ 
ch^ges in design, deployment, or weapon system Operational Rules. 

The studies are conducted joinUy by the Services, the Defense Nucle^ 
Agency, and the Department of Energy, with technical support provided by 
Service Laboratories and the Department of Energy's National Laboratories. 
The safety of a weapon system's design, deployment, and operaUonal safety 
is assessed against the Nuclear Weapons System Safety Standards. 





(U) While the safety standards and the requirements for conducting 
safety studies are established by DoD directive, the actual implementation of 
the directive is delegated to the Services. The individual Nuclear Weapon 
Safety Study Groups are led by the owning Service which determines what 
aspects of the system are to be examined in any given study. This practice 
allows the content of the studies and their supporting inadvertent or 
unauthorized launch analyses and security assessments to differ between the 
Services. 

(U) The NCOS has been completely successful in preventing 
unauthorized or inadvertent use, accidental nuclear detonation, or theft of 
any U.S. nuclear weapon. The Operational Safety Rules, reviewed and 
approved by the Secretary of Defense for each nuclear weapon system, 
establish de facto policy for the failsafe measures that assure against such 
events. 








DOE 


UNCLASSIFIED 
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(U) Department of Defense (DoD) oversight of the NCCS 
administered in three functional areas: safety, security, and control. Each 
DoD component assigned responsibilities within the NCCS has an inherit 
duty to oversee the implementation of those assigned responsibilities. The 
agencies and organizations responsible for both implementation and 
oversight of existing policies for safety, security and control of United States 
nuclear weapons are identified in Table 6. In addition, some DoD 
components are tasked to conduct independent oversight of NCCS activities 
for which they have no commsuid or implementation responsibilities. 

(U) The Secretary of Defense has overall responsibility for the NCCS 
within the DoD. He is responsible for approving both promulgation of and 
changes to all Departmental NCCS policy and for ensuring that it is 
implemented by his deputies. He also reviews and approves all nuclear 
weapon system Operational Safety Rules with the concomitant requirements 
for ensuring safety, security, and control. In addition, in his role as NCCS 
Executive Agent, he is responsible to the President for ensuring appropriate 
planning, integration, and oversight of the overall NCCS. 

(U) The inter-relationships between the Department components with 
assigned oversight responsibilities, their operational and administrative 
lines of command, and their lines of coordination and support in 
independent oversight functions are illustrated in Figure 7. The oversight 
process for the three functional areas is discussed below. 

(U) SAFETY OVERSIGHT 

(U) The Secretary of Defense has overall responsibility for nuclear 
weapons safety which he exercises both through his deputies* designated 
responsibilities in specific areas and through his review and approval of all 
Operational Safety Rules. He is supported in this effort by the Under 
Secretary of Defense for Acquisition, who has primary responsibility for 
safety within the Office of the Secretary of Defense, and the Assistant to the 
Secretary of Defense for Atomic Energy, who has primary responsibility for 
nuclear weapons system safety. He is further supported by a safety oversight 
system that involves numerous Department of Defense and Department of 
Energy operational and technical design organizations and serves to 
integrate their activities through a formalized process that Identifies safety 
Issues and raises them to the highest levels within the Department for 
resolution. This process includes both the nuclear weapon safety studies 
and the extensive analyses of weapon-related accidents and incidents 
discussed above. It also includes the participation of Joint Project Officers’ 
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Groups and Design Review and Acceptance Groups which both guide ^d 
direct weapon development and changes throughout Aeir • 

Nuclear Weapons Council and its subordinate oversight 

legislated responsibiUties for nuclear weapons safety. Addition^ oversight 
has been provided through independent safety reviews by ® . 

organizations (e.g.. the Clark Blue Ribbon Task Group, Dep^ent of 
Energy's Moe Committee, and the House Armed Ser^ces 
Pane§\ Each of these has provided findings which have led 
of Defense and Energy both to improve the nuclear ^®»pons s^ety proce^^ 
and to study further safety improvements to the nuclear weapons stockpile. 

(U) SECURITT OVERSIGHT 

(U) Nuclear command and control system security oversight is 
predominantiy focused on the physical and personnel security of nuclear 
weapons and weapon systems. Other aspects of security oversight 
(Including communications, computer, information, and opera^ cnAr'iflr 
security) are basically managed as an element of broader non-NCCS specific 
oversi^t processes. The Assistant Secretary of Defense for Command, 
Control. Communications, and IntelUgence is responsible for developing 
DoD security and personnel policies for the NCCS as well as for assessmg 

threats against it. 



(U) CONTROL OVERSIGHT 





(U) The Assistant Secretary of Defense for Command, Control, 
Communications, and Intelligence is responsible for developing comm^d 
and control policy, coordinating policy guidance between ag^cies. and 
developing methods for evaluating NCCS performance. The 
Chiefs of Staff, is responsible for developing the procedures that imp 
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those policies, and for conducting exercises and assistance visits to 
command centers to assess their effectiveness in implementing 



(U) OVERSIGHT INSPECTIONS 


(U) Common to all oversight areas is that each relies on inspections 
and assessments to support the oversight function. The inspection program 
is essentially split between assessments of those safety, security, and control 
measures that assure against unauthorized use and those that assure 
authorized use. 

(U) Assessments of the measures that assure against unauthorized use 
are centrally administered, through the Nuclear Weapons Technical 
Inspection Program, by the Defense Nuclear Agency. The governing 
document for these inspections is a joint Defense Nuclear Agency. Army. 
Navy, and Air Force publication which establishes a standardized inspection 
program. It delineates policy, assigns responsibilities, and prescribes 
standard procedures for conducting inspections of all nuclear-capable units. 
These procedures include frequency of inspections (not less than every 
eighteen months) and minimum requirements nuclear-capable units must 
meet in order to become or remain nuclear-certified. In addition to the 
periodic inspections, which are conducted by the Service or major 
command, each nuclear-certified unit is also inspected at least once every 
five years by Field Command. Defense Nuclear Agency. This second 
Inspection regime was developed to ensure that uniform inspection 
standards are maintained between all Services and major commands. 

(U) Inspections of units for those measures that assure authorized 
use, such as the Emergency Action Procedures that control force execution, 
are not centrally managed. These inspections are administered at various 
levels within the Department of Defense and, in many instances, encompass 
component-unique procedures. 

Assistant to the Secretary of Defense for Atomic Energy (U) 

(U) The Assistant to the Secretary of Defense for Atomic Energy is the 
principal assistant to the Secretary for atomic energy matters and, as such, 
has both implementation and oversight responsibilities for nuclear weapons 
safety, survivability, and use control. He is responsible for developing atomic 
energy policies for the Secretary and issuing guidance on his behalf. He also 
evaluates DoD programs for carrying out approved policies and develops 
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systems end standards for adnUnlsmado^ 

Irograms and reviews. He ® P?Jai. weapon^ the Nuclear Weapons 
departmental body £id Executive Secretary ^d 

Sflh?s‘SJd‘Sg Sue liaf ^ ‘ts independent oversight of 
SS?ar weapons sifety. security, and control. 

Service and CINC Oversight Responsibiliaes W 

(U) The MiUtary D«P“^^‘?Xfe*or”s^eW. secSl^*md°cSntrol 

with implementing Departmental P within their respective areas, 

and for ensuring proper toP'^»gP°g exercising, and malntalniiig 

Included in their “anabUiW to respond to Nuclear Control 

critical NCCS elements to pro>ade capa , orotecting nuclear 

Orders; implementing safety stantod and^^^^ ’.P of lost 

weapons from damage, misuse. ^ ’ pnsurini that standards and 
stolL. or missing "'^^^^^.^®^P°e^ncluded in the inspections they conduct 

^?a^l"aflv of recommended OperaUonal Safety 

Rules. 

(u) independent oversight 
(U) In addition to the Une 

components described ^^ovc. NCCS. These include the Defense 

conducting independent °f ^ „f Energy 

Nuclear Agency. Jo‘"J 

Nuclear .Weapons Council md ^ Nuclear Command ^d Cohttol 

Weapons iuppo^"‘'Sfe "endeni over Responsibilities of these 

agencies are summarized in Table 8. 

(U) The interdepartmental and 

contributes to the very complex draws on expertise and 

organisaSons in both Departments (Figure 8). 

(U) The NCCS S>tPPO^^o\“^^^^^ 

SSf ‘^”d° anXw addluonf iperuse Fr"om other NCCS agencies when 
required Its oversight responsibiliUes span the enUre NCCS. 

(U) These agencies provide *®J^”^S®^°h*Sghest*le^^^ of the 

recommendations for system ^le failsafe measures discussed. 

NCCS. A summary of their annual reports, tne laubcu 

and the report recipients is shown in Table y. 
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secret 


independent nccs oversight agencies 


I Defense Nuclear Agency 

Develops and assesses nuclear weapon accident and incident 

~ssr” 

^Spates to“SDoD%OE nuclear Gro 

revSvre, including the Nuclear Weapons System Safety Study Group 

iNuclear Weapons Council 

Considers safety, security, and control measures In both new and 
»sTcomm3onTto S^^^ of Defense and Energy on the 

rnuclear weapons research and 

Stockpile for the preceding year 

lu.S. Nuclear Command and Control System Support Staff 

Assesses and monitors the NCCS on a continuing basis to ensure ^ 
^cleS cSimand and control processes are integrated through aU 

environments to: 

- Assure authorized use 1 1 

- Assure against unauthorized or inadvertent use 
Reviews and monitors all NCCS policy guidance 

Conducts oversight of inspections, tests, * s of the 

Provides recommendations and an Annual Report 
NCCS to the Executive Agent 

UN CLASSIFIED 
TABLE 8^ 
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FIGURE 8 
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UNCLASSIFIED 
TABLE 9 
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(U) RISK REDUCTION 

(U) Risk reduction has been broadly defined as that combination of 
confidence-building and predictability 

nrobabilitv of outbreak of nuclear war as a result of accident misc^cuiauon. 
misinterpretaUon. terrorism, or unexpected technological * 

These measures can be taken unilaterally or 
the existence of these measures are communicated 

their effectiveness. In certain cases, they require multilateral participation. 

(U) Many U.S. government actions can be considered to be risk 
reduction measures, depending upon the breadth of interpretation applied. 
Based on the above definition, all of the failsafe measures 
this chapter contribute to risk reduction. The existence ai^ sometimes the 
details of the positive measures that assure against unauthorized use oi 
nuclear weapons have been well publicized, in large part to provide all 
nations with confidence in U.S. ability both to provide adequate secunty and 
protection to its nuclear weapons and to prevent 

resulting from an accident or terrorist incident. In addition, the degree of 
readiness and tight control implemented by those measures that assure 
authorized use have been developed to deter any adversary fro™ either 
miscalculating U.S. resolve and capability to respond to ^ attack or from 
misinterpreting actions taken to change the posture of the stockpik. 
Furthermore, both the Departments of Defense and Energy conduct 
research and development programs across a broad range of nuclear weapon 
and nuclear command and control issues. 


(U) TRADITIONAL RISK REDUCTION MEASURES 


(U) Historically, risk reduction measures have been defined much 
more nirrowly than what is Implied above. UnUl very recenUy, toey have 
focused almost exclusively on direct communications between the United 
States and the former Soviet Union, as a means of avoimng 
misinterpretation of actions and intentions of either side or to avoid 
potentially dangerous confrontations between their forces. A summary of 
existing direct communication and prior notification agreements is 
presented in Table 10. 


(U) To a certain extent, arms control negotiations and trebles have 
also served as risk reduction measures by reducing the growtii of and, more 
recently, the size and destructive power of each superpower's nuclear 
arsenal. While these measures remain important and have certbnjy 
contributed to the prevention of nuclear war between the United States and 
the former Soviet Union, the changes in the international security 
environment discussed in Chapter Two indicate a need for expansion 
beyond this traditional narrow focus. 
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1963 

1971 

1972 

1973 

1987 

1988 

1989 
1989 


Direct Communications link ("Hotline Agreement ). 
as modified (1971, 1984) 

Accident Measures Agreement, as modified 
(1976, 1977. 1985) 

Incidents At Sea Agreement 

Prevention of Nuclear War Agreement 

Nuclear Risk Reduction Centers 

Ballistic Missile Launch Notification Agreement 

Dangerous Military Activities Agreement 

Strategic Exercise Notification Agreement 

UNCLASSIFIED 


TABLE 10 
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CHAPTER FOUR 
FAILSAFE (U) 


(U) BACKGROUND 

(U) The effective safety, security and control of U.S. nuclear weapons 

is the most important goal of the U.S. Nuclear Command ^d Control 

System. As such, the positive measures which ensure that nuclear weapons 
s^ety. security, and control are effective and that they contribute to *e 
nnnrnnriatP "assure-assure against" balance receive regular and l^nse 
scrutiny and high resource priority from all NCCS componente. This 
scrutiny is particularly important in the current environment. 



(U) The Advisory Committee also recognizes that nuclear weapons wiU 
continue to play an important role in this country's deterrence strategy. 
Therefore, the abUity to assure the responsive and flexible use of nucle^ _ 
weapons, when authorized by the President, should be maintained while the 
United States pursues failsafe enhancements. 


(U) This chapter focuses on specific failsafe^ Issues investigated by the 
Advisory Committee. These issues were selected by the Advisory Committee 
to support a comprehensive, yet focused, assessment of all aspects of 
failsafe In its investigation, the Advisory Committee thoroughly considered 
all elements (l.e., equipment, facilities, communications, procedures, and 
personnel) of the DoD portion of the l^CCS. Based upon this review, the 
Advisory Committee identified specific issues which were considered to 
merit further detailed investigation. The three major issues addressed in 
this chapter are: 

• fU) Issue 1: What NCCS vulnerabilities exist and what improvements 
should be implemented to strengthen DoD positive measures to prevent 
accidental. Inadvertent, or unauthorized use while assuring authorized 
use of nuclear weapons? 


^ (U) Failsafe: That combination of safety, security, and control procedures and equipment 
Intended to prevent mistaken authorized use. unauthorized use, inadvertent use. or loss ol 
nuclear weapons or to Interrupt, terminate or mitigate the results of such action should one 
occur. These are unilateral actions that need not/should not be communicated to others to 
be effective. 
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. (U) Issue 2: Should the United States implement a system for post- 

launch destruct for aU nuclear weapons? If so. what types of systems 
should be implemented? What improvements are required 

• (U) Issue 3: Are current DoD procedures, equipment, and facilities 
adequate to maintain the required standards 

security, and control imder the full range of stockpile conditions? 

(U) Sub-issues are discussed with associated major issues in 
appropriate sections. 
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ISSUE 1: NCOS VULNERABILITIES (U) 


(U) What NCCS vulnerabilities exist and what improvements should be 
implemented to strengthen DoD positive measures to prevent accident^, 
inadvertent, or unauthorized use while assuring authorized use of nuclear 
weapons? 


• -(Sh Sub-issue 1 



• (U) Sub-issue 1-4 (Coded Control Devices on all U.S. nuclear 
weapons): Should the United States implement coded control 

devices on all current and/or future nuclear weapons s)rstems? If 
so, what types of devices and on which weapons systems? 
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(U) METHODOLOGY 

(U) The NCOS Assessment Study Group was estabUshed to exa^e the 
NCCS as it currently exists and as it may evolve by the ye^ 2011, and to 
propose opportunities, where possible, to improve the f^saie 
characteristics of the system. The Group was also tasked to ensure 
none of the recommendations it made would negatively ^ert the abiUty to 
use nuclear weapons in an effective manner, if authorized. This issue was 
particularly difficult in that it dealt with an existing, large, and complex 
system. The size and complexity of the NCCS necessitated a formalized 
approach to ensure a thorough and complete examination. 

(U) The first part of this approach was the development of a process 
flow Htaprram to document the procedures, equipment, and personnel that 
comprisi nuclear command and control. Development of this diagr^ was a 
multi-step task including data collection, site visits, review and editing draft 
diagrams with support from the responsible organizations, and finally, 
synthesis of the diagrams into a complete depiction of the nuclear command 
and control process. 


(U) When the process flow diagram was completed, the full NCCS 
Assessment Study Group systematically examined the documented process 
to identify weaknesses, potential failures, and opportunities for 
improvement, either through procedural or technic^ means. Since Study 
Group membership represented all appropriate NCCS technical speci^ties, 
agencies, services, and operating authorities, the expertise necessary for a 
thorough review was present. All data from the process flow diagram were 
converted into a Fault Tree Analysis computer model as an addition^ 
completeness check and alternative route for identifying areas needing 
improvement. 


(U) Using these techniques, the Study Group determined, and the 
Advisory Committee concurred, that while the NCCS was sound, further 
investigation into eight specific areas, with a view toward m ak i n g 
improvements, was warranted. 


(U) The Study Group established individual Red Teams to conduct 
each investigation, with the specific charge of taking an a^ressor’s 
approach to determine if any weaknesses could be identified and potentially 
exploited. Cognizant operating organizations for the areas to be investigated 
were invited to establish Blue Teams to help provide information for the 
investigations and to develop opposing views to the Red Team's findings if 
warranted. The Red Teams developed approaches, visited the appropriate 
sites, and consulted with the Blue Teams. This cycle was repeated as 
necessary. 


(U) Due to the role of coded control devices in assuring control of 
nuclear weapons, this area is also discussed in sub-issue 1-4. 
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(U) METHODOLOGY 


(U) This issue was investigated by a review of the publications 
describing this system and discussions with appropriate staff personnel. 
These publications are' appropriately highly classified with limited 
distribution. 
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(U) METHODOLOGY 

(U) The Red Team traveled to Kings Bay Naval Submarine Base. 
Georgia to receive detailed mission briefings and actual crew procedural 
demonstraUons by USS PENNSYLVANIA (SSBN 735) crewmen in a 
submarine simulator. Upon the completion of these dernonstratmns, the 
Red Team interviewed key members of the crew and reviewed the 
nreviouslv developed process flow diagrams. The Team members also 
toured USS TENNESSEE (SSBN 734) to familiarize themselves with an 
SSBN for the physical configuration and crew positions. 


















tu) RECOMMENDATIONS 

(U) The Advisory Committee recommends the Secretary of Defense: 
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(U) METHODOLOGY 


(U) A Red Team composed of experts from Sandia National 
Laboratories and the National Security Agency was established to investigate 
this issue. 
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SUB-ISSUE 1-8: 





(U) '.RECOMMENDATION 

(U) The Advisory Committee recommends the Secretary of Defense: 
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ISSUE 2: POST-LAUNCH DESTRUCT DEVICES (U) 

(U) Should the United States implement a system for 
destmct for all nuclear weapons? If so. what types of systems should be 

implemented? 

(U) BACKGROUND 

(U) Interest in employing post-launch destru^ct de^dces ^ ° 1 

terminating an unauthorized or inadvertent launch of a U.^ 
or an authorized /intentional but ill-advised launch in 
reconsiders the original execution order (during the approrim^ely 30 
minute flight time for ballistic missiles) has been expressed 
bXthe ^ and in the Congress. As a result of tltis interest the 

Advisory Committee was specifically tasked by the Secretapr of Defense 
examine the desirability and feasibiUty of addtag this new tj^e of fmlsafe 
device to all ballistic and cruise missiles in the U.S. stockpile. Upon 
consideration of this tasking, and after further specific discussion of the 
potential consequences of an inadvertent or unautho^ed detonation of ^y 
nuclear weapon, the Advisory Committee expanded the scope of tos testang 
to include all types of nuclear weapons in the current ^d planned stockpile. 
In order to rescope their tasking, the Advisory Committee formulated the 
following issue statement for investigation. 

(U) Should the United States implement a system for post-launch 
destmct for all nuclear weapons? If so. what types of systems 
should be implemented? What improvements are required? 

(U) METHODOLOGY 

(U) The Advisory Committee conducted a thorough ^d objective study 
of various post-launch destmct concepts. In acWition to ^e tasl^gs to^d 
support received from its Technology Working Group ^d Remote Destmct 
Study Group which are discussed below, the Advisory Committee invited and 
specifically considered the inputs from leading civilian experts from both 
inside and outside the government. The Committee also assessed the 
DOtential need for such devices in the context of both the changed 
hitemational security environment and its overall investigation of the failsafe 
and risk reduction capabilities of the current and programmed Nuclear 
Command and Control System. 

(U) To support its fact finding and concept development post- 

launch destmct investigations, the Advisory Committee 
Remote Destmct Study Group, under the direct supervision of 
of the Technology Working Group. The Remote Des^ct Stu^ Group was 
made up of 40 military and civilian representatives from the Office ot tne 
Secretary of Defense, the Joint Staff, staffs of the nucl^r Commanders n 
Chief, the Services, the National Security Agency, the Def^^ent ot 
Energy’s National Laboratories, and other Department of Defense Ag n 

IV-43 


TOP S ECRET — FRD — NOFORN WNINTEL 


- TOP OECRTT FRD NOFORN WNINTBTt 

Members were primarily field grade military 

dviUans. each with 15 to 25 years five 

cadre, formed by the Reniote Destmct Study^^^^^ „„ 

additional members, synthesized ^e detailed tecnmcm Sandia 

tensive inputs received from 

National Laboratories, was formed to provide an maepenuci 
th “stSy Group's findings. Private sector representatives were also 

consulted on an as-needed basis. 

(U) At the Advisory Committee’s direction. Ae 
a thr«-phased study l-sear^- W 

receive further guidance. 
provSld 

bioc=‘d^«fur^^^ ■ 

Joint Staff, the Services^e sides 

technical community. TOese mm A ^ jpr ti,e NCOS. Based on these 

Committee, ^after review and discussion, approved these critena. 

(U1 The Study Group received oVer 150 briefings at more th^ 16 
senarate DoD and DOE sites on technologies and weapons ^ > 

rnnducted an extensive literature search of over 100 (classified and open) 

is s^^rnf^fSlSlitSclu-S^S^JS^ atSJtr llu^n^^fa-’’ 

mi Five -types- of remote destruct options, discussed below. '“«ged 
in the Lur« of research: passive, active enable, active destruct bl-naUonal. 

Sid open source. Concepts of operations were ".TtiSrof ^ 
opuon. A descripUon of these concepts, along with ® “ .^5 q 

questions were forwarded to the organizations ®, include^concept 

and these agencies provided detailed analysis of options 
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implementation; evaluation criteria; ^ngineering-bas^ ilJd?Surity 
cycle cost, schedule, and technical risk; Study then 

considerations; and mission and operational impact. Th y 

used these analyses to refine the options. 

(U) with the five opuons fully developed, the 
five corresponding subgroups, with meml^rs of ootlon with 

“flTcftonSonis“ five fi>n|ons): ^^e^ 

issues (nuclear and environmental); vulnerabiUties; 

tSTe anS technical risk; projected development. 

costs; impact on weapon system and mission capability. poUtic^ 

operational impact; ^d termination and recall consideratio^^^^ 

evaluation then underwent independent comprehensive renews 

Studv Groun and Red Team to ensure completeness and validity, with me 

SSs”f^ded for review to the Technolo^ ^ 

then to me Advisory Committee to support its research and deliberations. 

(Ul The Advisory Committee concurrently solicited additional 
information and concepts, receiving a number of briefings . , 

exoerts on conceptual post-launch destruct systems and how mey might be 
SS,ir4nted.^ l^^^ experts also presented meir views on me 

perceived requirements for such a system, potential failsafe enh^cements 
nrovided how it might contribute to risk reduction and increased 
Sit^ation^al confidence in me control of U.S. nucle^ weapons, and how it 
might be shared with omer nations and deployed m Jieu of expensive and 
Dotentially destabilizing defensive systems. During the course of its 
deliberations, me Advisory Committee also solicited tlm r___ 

destruct views of omer non-government Individuals who appe^ed before 
me Committee on omer subjects. These included 
areas of nuclear weapons safety, arms control. ^ 

inputs were discussed during me Committee s deliberations ^d ^e 
smnmarized in a section below on post-launch destruct pros and cons. 

(U) As was me case in all areas of its review, me Advise^ Committee 
did not consider me desirability or feasibility of post-launch , , 

systems in Isolation from eimer world events or its omer findings. Bom the 
Seed for and me Ukely acceptability of post-launch destruct systems, as an 
additional risk reduction measure in me ^banged mternational se^^ 
environment were addressed. It also considered bsjindings. includi^^^ 
potential enhancements identified in me course . 

me effectiveness of me current and programmed NCCS ^d capability to 
assure against unaumorized or inadvertent launches or detonations of 
nuclear weapons. At me same time, me Committee remained keenly aware 
of me continuing role of nuclear weapons in United States deterrence 
strategy and me need to assure me responsive use of nuclear weapons when 
aumorized by me President. 
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(U) OBSERVATIONS AND ASSESSMENTS 

Post'Launcli Dcstruct Concepts (U) 

(U) The Advisory Committee determined that the 

-s 

active (which require external actions after launch). 

fU) Passive post-launch destruct devices are an 
launch controls and are designed to is required for 

SSi SsHiSasSriy “ 

Si-Xu” ■s.|rJ^'=s£B"-r£ 

Ssrxsi-K JS’ sns£.s pss^. 

which ar® tn prevent launch, passive post launch systems 

Wt“to XTSto launch occurs to terminate the launch or 

flight or to disable the weapon. 

(U) The Advisory Committee considered four active post-launch 
destruct concepts: 

. (U) Active Enable . Active Enablement system^e also designed 

to be failsafe and are similar to Passive systems. These systeins 
require ^enablement code received after launch or rele^e from 
the appropriate higher authority which turns off ^e destruct 
devices arid allows the authorized anning and fuzmg sequences to 
occur. If the enablement code is not received within a preset time 
interval, the weapon system is automatically destroyed. 

• (U) Active Destruct . Active Destruct systems 

detection and assessment of all unauthorteed missile ^ 

aooropriate higher authority who transmits a secure destruct 

to eker the on-board devices or to weapons systems able 
to intercept and destroy the missile. Unauthorized launch , 

transmitters would be added to all nuclear cmise ^ 

a global detection capability. As a subset oHnntation of 

Advisory Committee specifically investigated potential adaptation of 
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current missile destruct systems used to ensure range safety during 
peacetime missile test flights. 

• (U) Binational . These concepts are risk ^ 

are similar to Active Destruct. They require a sh^^d remoU 
detection and assessment capability for all 

launches by multiple national authorities, any of which c^ transm 

aTes^crCommLd. llie destruct system 

onboard or employ national systems to provide an intercep 

capability. 

• mi Onpn Source The Advisory Committee met with non- 
golemmental individuals who have proposed both passive active 
Dost-launch destruct ballistic and cruise missile concepts ^ 
Dublic media. The Committee compared these concepts, retaining 
tiiose areas described by the authors that differ from the concepts as 
described above. 
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Impacts of Technology and the Changed Security Environment 


(U) 


(U) Along with due consideration of the information and opinions 
provided on the desirability and feasibility of a post-launch destmct 
the Advisory Committee considered the impacts of technological a v 
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(U) RECOMMENDATIONS 

The Advisory Committee recommends the Secretary of Defense: 


ISSUES: SAFETY AND SECURTTY CU) 

fUl Are current DoD procedures, equipment, ^nd faciUties adequ^e to 
malnSn Ae required standards of nuclear weapons security, 

control under the full range of stockpile conditions? 

• fui Sub-issue 3-1 (Personnel Reliability): What enhancements 
sh^d he made to the DoD Personnel ReliabUity Program to provide 
required level of protection to nuclear weapons? 

. tu) Sub-issue 3-2 (Nuclear Weapons Physi^S^^:^ 

security standards and procedures adequate to protect nuclear 
weapons, both in storage and in transit? 

• nn Sub-issue 3-3 (Computer and Information Security): ^e 

isolation security adequately ^tned In hght of the 
evolving threat? What enhancements should be made/ 

• fill Sub-issue 3-4 (Delay Against Unauthorized Use): What means of 

protection cSiTreven^ use of a nuclear weapon if physical 

control is lost to an adversary? 

• fill Sub-issue 3-5 (Recapture and Recovery): What improvements 
shZd fe made to e^ce protecUon agatost detonation of a ^clear 
weapon in the event that all other layers of protection fall and an 
adversary gains physical control of a weapon? 

(tJ) BACKGROUND 

fUl The overall system of maintaining the required standards of safety, 
secuSSr. Sd "l fs Impressive. Its success In 
nr Inadvertent use is based upon a multi-layered approach which is 
discussed in detail in Chapter Three. This approach recognizes 
the maintenance of actual physical control of a weapon in a safe environment 
{^ pSlS“no Single factor can be made perfect under every condition. 

(U) Even before the Initiation of the FARR, the DoD, in concert 
the DOE as appropriate, had taken effective actions to 9 ^5^. ^ 

high-level paiiels in the areas of safety, security and control. 
with its Charter the Advisory Committee’s review emphasized security an 
^ntroL IS^ is^es were Considered by the Advisory Committee but only 
as they related to the assure-as sure against balangs. 

(U) These initiatives noted above, the President’s Nucle^ 
and other DoD and DOE long-term efforts (e.g.. introduction of ^ewer ^d 
more secure systems, backfit of more effective weapons to y 

Se making the U.S. nuclear stockpile safer and 

precise numbers of the U.S. nuclear weapons arsenal are changing in t 
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fluid security environment. Table 5 describes the essential composition and 
direction of^e arsenal in the future. Also, corrective actions haw been 
fiiltlated to address deficiencies noted during FA^ reviw. ^ ne^ 
effect of these initiatives is the continumg strengthening of the individual 

layers of security and control. 

(U) The Advisory Committee recognizes that the current system of 
safety, security, and control was developed to optimize t^ade-offs be^een 
reliability vs. system complexity, readiness vs. control, weight ys. jrield, etc. 
in relation to the then current threat and security environment, in 
response to the new environment, the U.Si is considering ophons to 
readdress the balance between these often competing goals, p^ of^s 
emphasis, continuing "Red Team" assessments are critic^ to idpti^g 
vulnerabiliUes reflecting current and evolving threats and to maintalnirig 
operational capabilities. One factor that should be kept In perspective Is 
that with the shift in force posture and focus, continuing emphasis on the 
enure system of command, control and communications; training; 
exercises; and readiness is necessary to ensure that the weapons could be 
redeployed in a crisis or in response to changing U.S. security 



(U) METHODOLOGY 

(U) The Advisory Committee established the Weapons System Review 
Study Group consisting of 32 members from 17 organizations deeply 
Involved in all aspects of nuclear command and control. The Study Group 
was organized into three initial review groups to optimize use of the 
assembled expertise. Some Study Group members served on more than one 
review group because of their unique experience and talents. 

• (U) Unauthorized Launch - The first group examined the 
potential for Unauthorized Launch Analysis program enhancements 
by (1) reviewing existing Unauthorized Launch Analysis 
assumptions, criteria, methodologies, and results for adequacy, 
compatibility with postulated threats, and detail; and (2) surveying 
typical sites and operations for weapon systems of concern. In 
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some cases, weapon system trainers were visited in conjunction 
with site and ship visits. 

• CU) Inadvertent Launch - The second groi^ 

adequacy of aU other nuclear safety analyses hy 

modes and effects, and inadvertent launch and other for 

adequacy. compatibiUty with postulated ^ ’ 

spedihc^. and results; and (2) surveying typ^^ sites ^ 

ooerations for weapon systems of concern. The group ms 

evaluated the efficacy of the overall nuclear weapons safety program 

process. ( 

. mi Securitv - This group determined the potential for security 
;rSLIS^cements% feviewing (1) all weapon storage^ 

Site Security Folders. (2) waivers, exceptions, and vari^ces and 
^pe^Tresults. (3) current Issues relaUve to “cu^ forces. (4) 
cu^t security research and development Ptogr^s. ^ (5) 
typical storage and transshipment sites and security operation^ 
Additionally, security concerns were solicited from site secu ty 

forces. 

(U) Detailed briefings were, received in appropriate areas. 

(U) The review groups identified potential areas of concern and a 
seven-member Red Team was formed. The Group correlated weapon 
svstem design features, common functions (movement, m^ntenance, 

Snlng etc®" Ld weapon stockplle-to-target sequences to Identify 
potential problem areas. 

mi Areas of concern were solicited from knowledgeable persons 
throu^ visits to 34 commands and organizations, including those within the 
DOE nuclear weapons complex. 

(U) Findings from the 1984-86 Oioint Chiefs of Staff 
and Control Study relating directly to nuclear weapons and their facilities 
^re renewed against the backdrop of today’s fluid security environment. 

(U) All review groups correlated data arid potential Issues ^d 
enhiicements were identified for consideration by the core Study Group. 

(U) The Study Group’s core group evaluated Issues to i^ntify 
recommendations to the Advisory Comnilttee ^d those 
minor program enhancemerits. (These latter items were the subject o 
separate correspondence from the Study Group chaiiman ^ 

cognizant offices). Potential issues were reviewed with Red Team members. 

(U) The Study Group chairman periodically briefed me Ad^so^ 
Committee on evolving issues and intermediate findings of its re ot„rtv 
received guidance from the Committee. In all cases, members y 
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Group were encouraged to make any minority or dissenting opinions known 
to the Advisory Committee. 


fU) Based upon its review of safety, security and 
Committee identified five sub-issues as meriting further detailed re 
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(XJ) SUB-ISSUB 3- It PERSONNEL RELIABILITY 

(U) What enhancements should be made to the 
ReUability Program to provide the required level of protection to nuc 

weapons? 

(U) background 

pSSSi to prS ttie loss, iheft, sabotage, unauthorized use. accidental 
damage, or destruction of a nuclear weapon. 

(U) The significance and importance of the Persoimel Reliability 
Program will continue to increase in the future. CriU^ information 
continues to be disseminated, computer hackers wUl capable 

and economic pressures become greater. As a result, demands 
personnel will increase. 

(U) METHODOLOGY 

fU) MulUple facets of personnel security in the mmlear command and 
control system were examined by the Weapon 

with special emphasis on: method^s to ensure fidelity of cntical NCCS 
personnel and the potential role of polygraphs in the PRP. 

(U) ’ The methodology used to review procedures for determining and 
ensuring personnel reliability included: 

• (U) A thorough review of all national and DoD-level personnel 
reliability guidance. 

• (U) Discussions with appropriate officials to determine (p 
ImpUcations of eliminating questions on arrest history, credit 
history, drug/alcohol use and mental health, arid organizational 
afliliatlons. and (2) possible alternative methods of determining t e 
fidelity of personnel in critical nuclear command and contro 
positions. 

• (U) Review of recommendations to the DoD office with 

responsibility for personnel reliability on the ° . 

polygraph testing for PRP personnel. V^idity of 

and recommendations were coordinated with the Direct 
Defense Polygraph Institute. Further, current and former 
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personnel managers were questioned on their views of the role of 
polygraph testing. 

(U) OBSERVATIONS AND ASSESSMENTS 

fUl The PRP is applicable only to DoD military, civilian, ^ 

r^e^ed authenucators In all cases. PRP personnel must be U.S. citizens 
or U.S. nationals. 

(U) The PRP system Includes "critical" siid controUed bWete with 

the svstem. In addition to these two types of 

PQtnWished for sneclallv designated billets whose holders undergo 

SSaorM reSIb^ Testtog (l.e.. counter-intelligence scope polygraph). 

(U) WhUe adherence to PRP administrative procedures may be waived 
during wartime, particularly in a combat theater, the ph^s^ y 
nractical reouirements of the PRP continuously remain in effect, 
rommanders must continue to apply their best professional Judgement and 
S^Slfy t^e indiXals to perform nuclear weapon duties. 

rni A wide ranee of nuclear command and control positions (Table 13) 
come^undJtoe^ and there are approximately 58.000 DoD pereo^el 
(56 447 military. 1.388 DoD civilian, and 144 civile contractore) in 
nrntfram All candidates for the program undergo initial screening to 
§e?Se ^m^tenc^ Ld dependability prior to assuming their 

nuclear commmid and control responsibilities. Screening includes a 
nersLal sSiSw investigation, medical evaluation, review of personal 

Sds SdT?^Son^ Upon certification. PI^ personnel are 

ISSectk to a continual evaluation prpcess. both on and off duty, to assure 
thS: ahmty to perform their PRP duties, decertification (temper^ or 
permanent from these duties is required whenever ^ 
meet reliability standards. Decertification can result from alcohol or drug 
?bu^ com of a serious offense, physical or mental condition, poor 

attitude, or a lack of motivation. 

fui In 1991 less than 3% of all PRP personnel were permanently 
' remold from toelr nuclear weapons duUesl^ Since 1984. this pereentage 
has declined from a high of about 5%. 

(U) Four important changes have affected the PI^ in 
years. First, the DoD has developed a better appreciation of the greats to 
me NCOS. This appreciation is derived from lessons learned in recent 
espionage/insider cases and the threat posed by the Increas ng 
sophistication of computer hackers. 
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EXAMPLES OF PRP POSITIONS^ 


• Commanders; delivery unit 
Pilots and crew; delivery aircraft 

Delivery unit personnel and supervisors (who, by the nature of 
assigned duties — weapons handling, transporting or launching -- could 
cause the unauthorized launch, release or firing of a nuclear weapon) 

Commanders, personnel and supervisors; nuclear support units (e.g., 
maintenance, retrofits, Umited life component changes) 

Personnel In the command and control line 

- Control or use authenticators and EiAMs 

- PAL teams and management personnel 

- Staff officers who could direct the employment of nuclear weapons 

- Personnel who control or'use nuclear missile targeting tapes 

• Nuclear weapon handling and transport personnel 

- Transport aircraft and vehicle crew and operators 

- Crane operators 

- Storage and supply clerks 

• Explosive Ordnance Disposal personnel 

• Nuclear weapons security guards 

• Weapons delivery system maintenance personnel and supervisors 

• Inspectors 

• Custodial unit personnel 

• Communications security personnel (who receive, maintain and 
distribute sealed authenticators, PAL material, or related codes) 

*PRP positions are "critical" or "controlled", depending on the degree of 
access to nuclear systems and related equipment and technical knowledge. 


UNCLASSIFIED 


Table 13 
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(U) A second Important devdopment involves a 

=si.-!^gi5?g=y,asgr-A ^g» » 

command and control positions (discussed below) ^nd 

?hSd &e tot^lS^s rfSground investigation « »“ 

hampered. 

fUl Third the massive downsizing of the U.S. nuclear arsenal has 

toprSJed^ irS^ementaUon. The «tro^de of ^“” 3 , 

overseas and other force adjustments anticipating the ^esiaenis wucie^ 
?nfuatores^d SSs control agreements have reduced the numbe^f people 
“p^fror^out 76.600 in .1989 to 67.000 in 1990 to 58.000 in 

1991. 

(U) Finally, at the same time the program is 

Itten^aeS prc’Hltons. which are being drdted for implementeUon under 
the dl-ection of the Assistant Secretary of Defense (Command. Control. 
Communications and Intelligence), include: 

• (U) Institution of additional reliability tests (i.e., counter- 
intelligence scope polygraph) for selected ^g^2o^ 

"specially designated nuclear command and consol positions . 
These positions include, but' are not necessarily limited to. 
personnel with access to the nuclear command ^d conbrol coding 
^d authentication processes and a commiinications medi^ 
necessary to transmit release, execution, or termination orders, 
personnel involved in the preparation and production of nuclear 
command and control coding and authentication documents and 
equipment; personnel involved in preparation production o 
nuclear weapons targeting tapes and maten^s; and maintenance 
and security personnel who could have an adverse impact on 
system performance for nodes and equipment that 
stagle-point-failure elements for the nuclear command and control 

system. 

• (U) More restrictive pre-service and in-service dna^^ 
abuse disqualifying standards (e.g.. anabolic steroid a^^^^ any 
hallucinogen use, and alcohol abuse rehabilitation failure). 
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• (U) Development of a formal training course for installation PRP 
administrators. 

• (U) Development of PRP procedures during transition-to-war 
and wartime. 

• (U) Development of a PRP management information system. 


(U) CONCLUSIONS 

(U1 People compose the most important layer in the system of positive 
measures. Efforts to deploy, protect and operate 
fundamentally and ultimately depend on the loyalty, 

of NCOS personnel. The Advisory Committee concludes that sophistic^ed 
technological safeguards, while Important and necessary, cannot substitute 
for attention to effective personnel reliability, train^g. ^ 

inspection programs. The DoD’s careful attention to selecting Ae most 
capable and loyal personnel to conduct nuclear weapons-related 
and its attentive implementation of programs to monitor their reliability will 
continue to be essential in maintaining the Department s record of effective 
nuclear security and control. 


(U) RECOMMENDATIONS 

(U) The Advisory Committee recommends the Secretary of Defense; 

• (U) Maintain strong continuing commitment to the highest 
personnel reliability standards. Specifically maintain a vigorous 
Personnel Reliability Program (PRP) for DoD and contactor 
personnel involved in all aspects of nuclear cominand aim control 
• (weapons handling, maintenance and transportatum, sojtwm 
readAvrite access, control/access to nuclear command and control 
code material, etc.). 

— (V) Continue vigorous opposition to current legal 
challenges to certain background questions on DD Form 398 
(DoD Personnel Security Questionnaire (BI/SBJ)} and DD Form 
398-2 (DoD Personnel Security Questionnaire C^ational Agency 
Check)} for those personnel assigned nuclear command and 
control responsibilities. Current and pending lawsuits, \f 
litigated successfully against the DoD, would prohibit the use of 
behavioral inquiry in the consideration of personnel for 
security clearances to sensitive nuclear command and control 
respon^ilities. 

(U) Emphasize the equal importance of initial investigation 

and reinvestigation in both the selection and the retention of 
personnel with NCCS responsibilities. 
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• (U) For personnel assigned to the NCCS* ensure , 

appropriate precaution is taken to enhance personal relumilily. m 
accordance with national g ui dance, administer random om 
aperiodic counter-intelligence scope polygraph 
those individuals who cue assigned to 'Especially designated nuclear 

command and control positions," 
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SUB-ISSUE 3-2 
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(U) SUB-ISSUE 3-3: COMPUTER AND INFORMATION SECURITY 


(U) Are computer and information security adequately maintained in 
light of the evolving threat? What enhancements should be made? 



(U) METHODOLOGY 


(U) Personnel from both the NCOS Assessment Study Group and the 
Weapons System Review Study Group conducted site visits and detailed 
research and analyses of NCCS facilities using automated systems. 
Additionally, discussion papers on specific points were prepared by both the 
staff and supporting agencies and provided to the Advisory Committee. 
Outside experts also briefed the Advisory Committee on appropriate aspects. 
The Advisory Committee specifically directed detailed investigation of: 
potential vulnerabilities of automated nuclear command and control systems, 
both to computer "hackers" and to insiders circumventing procedural 
controls intent on modifying NCCS software; vulnerabilities to a wide range 
of physical attacks or natural disasters; and potential vulnerabilities caused 
by inadequate control over various phases of automated system hardware, 
software or f^irmware development or acquisition. 

(U) The NCCS Assessment Study Group assigned a Red Team to 
investigate whether insiders or outside hackers, circumventing procedural 
controls by modifying NCCS software, could cause an unauthorized launch or 
release of nuclear weapons. The Red Team reviewed the process flow 
diagrams to identify all command, control and communications systems that 
are used to prepare, inject, relay, or receive EAMs. The Team visited 
representative sites to examine physical security and software procedures 
and to determine the degree of difficulty involved in gaining access to key 
EIAM handling systems. Independent of the Study Group efforts, the 
Advisory Committee asked the National Security Agency to assess the 
security of computer systems used in nuclear weapon systems and the 
nuclear command and control communications system. 
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(U) Additional briefings were received on results and methodolo^ 
used for adversarial analyses of software in the TOMAHAWK cruise missile 
and ICBMs. 


(U) Assessment of this issue was also supported by the NCOS 
Assessment Study Group's investigation of the possibility of false attack 
warning due either to insiders or hackers. The observations, conclusions 
and recommendations pertaining to that issue are discussed in an earlier 
section. However, many points germane to the overall issue of information 
security were noted during this investigation and are discussed in this 
section. 
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(U) SUB-ISSUE 3-4; DELAY AGAINST UNAUTHORIZED USE 


(U) What means of protection can prevent unauthorized use of a 
nuclear weapon if physic^ control is lost to an adversary? 


BACKGROUND 


(U) The overall system of maintaining the required standards of safety, 
security and control to prevent unauthorized or inadvertent use is based 
upon a multi-layered approach as discussed in Chapter Three (Figure 4). 

This series of mutually reinforcing safeguards and positive measures 
addresses all aspects of the weapon life-cycle to include: personnel 
reliability; physical security; weapon design (including use control devices, 
safety advances, and environmental sensing devices); procedures; and 
recapture /recovery if control is lost. This approach recognizes that while 
the maintenance of actual physical control of a weapon in a safe environment 
is paramount, no single factor can be made perfect under every condition. 


































' r ^ 


^<SA ' 

•.'1* •. ^.-.T/ !■;■'. 1 .'■• * . 






i 1’*:. 


Iti- •; 


^ *J<'' ^ ' V ■* *\ “ ‘ 'V '% /• . ^ 

‘•' ■‘''•j:.v'Vr ■/' ^v’^**'? ■..'■* *■ • . V.:.v M , \' w- -•• .•'’.s'*'"' 

‘‘f.-- -•■>.-i"*. ^ ;-■ J 'Vu ,- • * ' ■' r' “VT'' 

.'jVV'"', ''' ‘•'*7^" **~ "V^ ’?v-‘ '•*, ' *'"* 

,;i: '- v ,> A', v .' .' ••'. >. . . ' • ': • ; /V ' , 

"• ■ ■ ' **• ‘- ly.C* ' '*• • “•■•■**■' • .-- -. ■ ■ - • ' •"■• ■ 


•■ / ...; ■^-• 




• ^ I 


^4 ^ * t •'i.’f ?4- s. ii. ^ *" ‘ ^ ^ J, ^ ^ ^ ^ -c- s* ->• ^ * ” i "I . 

. ' '■ .■ •■' ‘v ,^r;;;V'\'- ‘ t ’-•.•■ ..-X-% * v"* .* ’ , \v • .'v "'^■V'- v"^ 

I' ^ A ^ ‘'- o.*/' ,,'v V- •' " A:\ ‘ 

' '>'^ '’A ^ ' fj. "X ' , ,". ‘* ’ "‘*** * * *‘*'^*- s t '” *" <'/?» ' i r'/ 




* i 





(U) RECOMMENDATIONS 

(U) The Advisory Committee recommends the Secretary of Defense: 
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CHAPTER FI\ne 

nuclear command and control system oversight 
” and policy CU) 


(U) ISSUES 

(U) Among the specific issues considered by the Advisory Committee 
were: 

. tU) What measures should be taken to improve oversight of the 
Nuclear Command and Control System (NCCS)? 

• fiJ) Should the DoD develop a consolidated positive measles 
policy that addresses all nuclear weapons safety, ^curity, , 

conSol requirements (including positive 

and procedures) to increase confidence in our abiUty to Py^v^t 
unauthorized or inadvertent use of nuclear weapons? If so. what 
shoiild be included in this policy? 

(u) background 

(U) Effective and demanding oversight of all aspects of the NCCS is an 
essential element of the system for a safe ^d 

force Due to the complexity and scope of the NCCS. this over^gnt system 
itself is very complex, with responsibilities assigned to many offices and 
organizations. 

(U) NCCS oversight is conducted at all echelons within DoD and is 
characterized by two types of oversight. 

• (U) Line Oversight: Directive authority to review, monitor and/or 
assess NCCS elements by agents who are assigned primary line 
responsibilities within the area of concern. 

• (U) Independent Oversight: Directive authority to review, monitor 

and/or assess NCCS elements by agents who have no primary line 
responsibility within the area of concern. 

(U) The Advisory Committee examined this issue to detemine if the 
oversight structure and mechanisms are overly complex, to detemirie if 
consistency in the application of standards and requirements is being 
maintained, to determine if the oversight system can respond effectively to 
the changing environment, and to evaluate the effectiveness of fo o - p 
oversight comments and results. 
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(U) METHODOLOGY 

(U) The Advisory Committee's review of NCCS oversight focused on a 
detailed and thorough evaluation of the structure, orgmii^tion, 
effecUveness of the organizations and agencies wrtthin DoD , 

responsibilities. The initial assessment was conducted by the U. 5 . Nuclear 
Co^and and Control System Support St^f and included ^ com^^^^ 
examination of governing documentation, discussions 

agencies and commands, and the development of descriptive , , 

which illustrate oversight mechanisms. A formal bne^g w^ devolved ^d 
presented to the Advisory Committee. Following the briefmg and extended 
discussions, key Judgments and recommendations were developed. 

(U) Additionally, the Policy and Requirements Study exa^ned 

oversight. This study group was chaired by the Director of Strategic Forces 
Policyf from the Office of the Assistant Secretary of Defense for International 
Security Policy. The group included representatives from the Nabonal 
Security Council, appropriate offices of the Secretary of Defense, responsible 
defense agencies, the Joint Staff, and the Services. It conducted an 
extensive review of U.S. policy documents pertinent to nucle^ failsafe and 
risk reduction. The Study Group idenUfied criteria for the document 
review, developed review checklists to provide uniform assessments, ana 
reported review results. 


(U) The review included: 

• (U) 28 pertinent arms control and disarmament agreements. 

• (U) 31 national policy document (National Security Decision 

Directives and National Security Directives) 

• (U) 18 DoD directives and instructions 

• (U) The Policy Guidance for the Employment of Nuclear 

Weapons (NUWEP) 

• (U) The FY 1992-1997 Defense Planning Guidance (DPG) 

• (U) 12 Joint Staff Publications 

(U) The Advisory Committee also investigated whether a need existed 
for the development of a consolidated positive measures policy that 
addresses all aspects and requirements of nuclear weapons safety, security, 
and control in a single document. The Policy and Requirements Study 
Group was assigned to examine this issue. 

(U) In response to a specific request from the Advisory Committee, an 
additional review examined DoD nuclear weapons s^ety arid scanty policy 
and the adequacy of its implementation in the Services and NATO. 
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(U) The Policy and Requirements Study Group coordinated with the 
other Working and Study Groups to assess their proposals and to provide 
recommendations on potential policy implications. The Group also 
examined the specific issues associated with a proposed comprehensive 
positive measures policy, enhanced external control over naval weapons, a 
post-launch destruct system for nuclear weapon systems, and the peacetime 
readiness posture of ballistic missiles. These reviews consisted of a series of 
meetings and discussions centering on the policy ramifications of each of 
these proposals. Alternative approaches were considered and 
recommendations were briefed to the Advisory Committee. 


(U) As a part of the oversight review, the Weapons Systems Review 
Study Group specifically examined the management structure within DoD for 
the conduct of nuclear weapons systems Unauthorized Launch Analyses. 
Briefings were received on Unauthorized Launch Analysis methodologies 
used for various weapons systems, the methodology to determine the 
adequacy of security at all Army nuclear weapon storage sites, and on various 
adversarial anailyses. The Group compared observations and data from, the 
preceding with DoD standards and criteria, to determine if gaps or 
deficiencies existed. The group formulated draft recommendations and the 
proposed summary and recommendations were reviewed for factual 
correctness by organizations having related program responsibilities. 
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CHAPTER SIX 
RISK REDUCTION (U) 


(U) The Advisory Committee considered two broad issues in its risk 
reduction^ deliberations: 

• (U) What confidence-building and predictability measures 
(including sharing of appropriate technologies, systems, 
information and procedures) should be implemented to reduce the 
risk of nuclear hostiUties with any power? 

• (U) Given the dramatically altered world situation and changing 
strategic threat, what measures should be taken to improve U.S. 
intelligence collection and analysis such that inforaation on 
nuclear weapons and devices is provided with sufficient accuracy 
and timeliness to enhance the full range of risk reduction 
measures? Additionally, what measures should be taken to ^fo^s 
and integrate the efforts of all organizations responsible for both 
strategic and tactical warning and the tracking and control of 
proliferation of nuclear weapons, other weapons of mass 
destruction, and advanced weapons technology? 

(U) BACKGROUND 

(U) Risk Reduction measures are applicable to the prevention of 
nuclear hostilities, no matter how these hostilities might be initiated: 
whether by accident, as an unauthorized act, or as a deliberate attack by a 
national or sub-national entity. These measures have traditionally been 
implemented in two forms. The first is direct communications links and 
associated procedures derived through formal agreements between 
governments to avoid misinterpretation of intentions or actions ^d to avoid 
Dotentially dangerous confrontations between forces. The second is through 
arms control negotiations and treaties to limit or prescribe cert^ behaviors 
and reduce the size, destructive power, and proliferation of nuclear araenals. 
The historical focus of these measures has been., to reduce the risks of 
nuclear war between the superpowers and many such agreements and 
treaties are In effect 



i(U) Risk Reduction: That combination of confldence-bulldlng and predictabUlty measures 
that would reduce the probability of outbreak of nuclear war as a result of ^ 

miscalculation, misinterpretation, terrorism, or “"expected technological breakthrou^^ 
These measures can be ta^pn unilaterally or multilaterally. but to ^1 cases t ra«u»<s 

these measures are communicated with others to ensure their effectiveness, 
they require multilateral participation. 
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(U) Dramatic changes in the international initiatives, 

for a reevaluation of risk reduction efforts. New nsk re mn fronting* 

concents and dialogues may become increasingly gem^e in c^ronting 
Sfnew c^^enges^and opportunities of the twenty-first century. 


























Middle East: 

~ Middle East peace process , ^ ^ 

- Arms Control and Regional Security Working Group (with Russia) 

- IsraeU proposal for "hotline" with Syria and advanced notification ot 

military maneuvers ^ * 

I Initiative on non-proUferation and arms transfer restraint 

Arms registry 

Republic of Korea/Democratic People’s Republic of Korea 
denuclearization declaration 

Joint Nuclear Control Commission, inspection regiine 

Proposed South Asian non-proliferation conference (with Pakistan, India, 

China, and Russia) . ». « i , i. 

Indian interest in Incidents at Sea Agreement with Pakistan 
• Indo-Pakistani Agreement on protection of and exchange of data on 

nuclear facilities xi 

• Indo-Pakistani senior military "hotline" and exercise notifications 

atin America: , 

- United States-Brazilian Resolution on hemispheric security and arms 

control (to the Organization of American States) 

- Treaty of Tlatelolco nuclear free zone (less Cuba) 

- Argentine-Brazil-Chile Agreement to ban biological and chemical weapons 
- Argentine-Brazilian Accounting and Control Committee Agreemeiit on 
nuclear safeguards (with the International Atomic Energy Agency) 

- "Open Skies" Treaty (overflight regime) and extension to States of the 

former Soviet Union 
- North Atlantic Cooperation Council 

- NATO Permanent Representatives meeting on crisis management 
- Conference on Security and Cooperation in Europe 
~ Conflict Prevention Center 
— Communications Network 
[ntemational: 

— Nuclear Non-Proliferation Treaty 
- Missile Technology Control Regime 

- International Atomic Energy Agency Safeguards r 

— United Nations' 'Transparency in Armaments" Resolution, Arms Transler 

Register 

- Workshop on Arms Transparency 

- United Nations' study, confidence-building measures in space 
- Negotiations on global chemical weapon ban 
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• (U) Expand appropriate bilateral and regional iriformation 
exchange and risk reaction measures xuith nations in areas of 
greatest proliferation concern. 


• (U) Establish multilateral agreements for consultation 

event of a nuclear weapons incident. These measures would rely on 

timely and assured communications. 



• (U) Establish crisis communications capabilities among 
appropriate nations of a region. 


• CU) Transfer and/or exchange, in appropriate cases, nuclear 

weapon safety technology; physical security technologies, ^ 

techniques, and concepts; and use control/demal concepts (with 
certain restrictions) to selected nations (consistent with the 
provisions of the Nuclear Non-Proliferation Treaty^ and other 
proliferation control agreements), to reduce the risks of an ^ 

accidental or inadvertent nuclear weapon detonation, unaitihorized 
ficg , or acts of terrorism that might lead to misinterpretation, 
miscalculation, or hostilities. This transfer and/or exchange should 
be conditional on mechanisms that ensure this information does 
not degrade efforts to prevent the proliferation of nuclear weapons, 
enhance the operational effectiveness of the recipient nation(s), or 
jeopardize the safety, security or control ofU,S, nuclear weapons 
systems, 

• (U) The National Laboratories can play a distinctive and 

important role in the process of determining appropriate 
technologies, procedures, systems and system data to consider. 

States of the Former Soviet Union (U) 


(U) Specifically, with respect to the states of the former Soviet Union, 
the Advisory Committee recommends the Secretary of Defense: 
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• (U) To exploit the current window of opportunity for meaningful 
risk reduction that now exists with the Republics oftheform^ 
Soviet Union, the United States should move beyond the traditional 
arms reduction agenda and pursue new initiatives (DoD is already 
pursuing many of these initiatives). These areas include: 

— (UJ Joint measures (e.g„ intelligence shanngi) to reduce 
proliferation; 

•• (U) Joint initiatives to provide timely warning; 

*• (U) Overview of U,S. and Russian/Commonwealth of 
Independent States command structures; 


M ([j) A lexicon on command and control terminology 
which would supportfuture cooperative efforts and 
confidence-building measures; 

— CU) A dialogue on nuclear command and control^ 
oversight, command and control assessment techniques, 
and use control policies and standards with the aim of 
improtn.ng both sides* command and control capability to 
prevent unauthorized launches; and 


M (u) Discussions on early deactivation offerees to be 
reduced under signed agreements. 



Undeclared/Emerging Nuclear States (U) 


• (U) Consider a Multilateral Nuclear Incidents Agreement, open 
to all nations, patterned after the U,S,-USSR ^Accident Measur^" 
and 'Prevention €f Nuclear War" agreements, and neutral and silent 
with respect to possession/development of nuclear weapons, as a 
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particularly attractive risk reduction model for this category of 
nations. 
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APPENDIX A 

The FARR (Charter, Organization, Methodology) 


(U) Introduction : 

(U) The Fail-safe and Risk Reduction Review (FARR) was 
initiated at the direction of the Secretary of Defense to assess 
the current and programmed Nuclear Weapons Command and Control 
System capability to meet the dual reguirements of assurance 
against unauthorized use and timely, reliable execution when ^ 
authorized by the President. A specific tasking was to identify 
opportunities for positive measures to enhance nuclear weapon 
safety, security and control and reduce the risk of the outbreak 
of nuclear hostilities due to miscalculation, accident, or 
deliberate action. 

(U) The Charter for the Advisory Committee for Nuclear Fail- 
safe and Risk Reduction, published in the Federal Register on 20 
December 1990, is reproduced on the following pages. The members 
of the Advisory Coitanittee were chosen and appointed by the 
Secretary of Defense in March 1991. The first meetings took 
place in May 1991 and for the next 18 months an extensive and 
comprehensive, top-to-bottom, independent, review of the U.S. 
nuclear command and control process was conducted. The five- 
member Advisory Conmittee was supported by over 150 personnel 
which were formed into specific working and study groups from 
over 50 government organizations and agencies in the U.S. Nuclear 
Command and Control System. Additionally, the Advisory Committee 
solicited and received the testimony and views of many prominent 
individuals from both inside and outside the government on the 
issues of improving the fail-safe and risk reduction nature of 
the U.S. nuclear command and control process. 
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CHARTER 

ADVISORY COMMITTEE 
FOR 

NUCLEAR FAIL-SAFE 
AND 

RISK REDUCTION 

1, Title: Nuclear Fail-safe and Risk Reduction Advisory 

Committee. 

2. Committee's Terms of Reference. 

a. Purpose . To assess the current and programmed Nuclear 
Weapons Command and Control Systems capability to meet the dual 
requirements of assurance against unauthorized use and timely , 
reliable execution and to identify opportunities for positive 
measures to enhance fail-safe measures and reduce the risk of the 
outbreak of nuclear war due to miscalculation or accident. 

b. Scope . The review will examine the nuclear weapon 
command and control process from the NCA to the individual 
weapon. The study will focus on identifying opportunities to 
enhance the fail-safe and risk reduction capabilities of the NCCS 
consistent with national security policy and the requirement for 
assured authorized execution. The period of interest of the 
study will be 1991 to 2011. 

c. Approach . 

(1) An independent Executive Committee composed of three 
distinguished civilians or retired military from the private 
sector and two high level OSD officials will guide, provide 
formal review and approve the review findings. The committee 
will be chaired by the distinguished civilian designated by the 
Secretary of Defense. While the committee as a whole should 
possess knowledge of the political, technical, and military 
issues involved, part of the criteria for selection of some of 
its members will be to include persons without current 
involvement in the nuclear chain of command. Study Executive 
Committee Members will be appointed for a one year term and 
approved by the secretary of Defense using the procedures 
specified in "DOD Directive 4205.2, (CAAS)," January 27, 1986. 
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t21 A comnittee Staff chaired by a Staff Director »ill 
conduct toe study and support toe Executive committee in 
preparing the f inal report . 

(a) The Staff Director will 

required to study functional areas current and future 

Executive Committee (e.g., policy, proceaures*, 

system, technology, etc.)* 

(b) committee Staff and 

rnc?Sre%e^r^efe^ari%f from ell 

NCOS agencies. 

(3) The study will be conducted in Jhree Ph«es^^^Phese I 

will review current ‘?9f? in meeting toe dual require- 

ness of existing positive “ensures in ^^ertent use while 

ment of assuring Si ihen authorized. Phase I will 

assuring timely and which will focus on: (a) current 

involve three subcommittees which reduction 

safety, security, and contra rinnor-tunities for post-launch 
measures? and (c) technologic pp coded control of nuclear 

command destruot of ""“boef ««epons a d “ deficiencies 

weapons at sea. Each ?"bco^ittee will aoc^^^^^ measures that 
found and identify available or emerging p fail-safe and risk 

^rcorrect those. deficiencies and improve J“\„tegrate the 
reduction capabilities of feasibility of improving NCCS 

findings of Phase I maintaining the 

fail-safe and risk ^®^^?^i°\nluthorized use and assuring use 

balance of III will develop the final report 

when authorized. Phase III ^ identified deficiencies and 

^Stoif "fli™ tof Sk eduction improvements, 
d. obTeebives t 

Assess the effectiveness of existing positive 
^iL^JIStv security, and control in the command and 
measures for safety, _ yoiate to assured execution 

control of nuclear weapons as they relate to 

and unauthorized use. 

f9\ assess the effectiveness of existing positive 

; „.asures‘l!>rirn-sirc Ind reding toe “ 

■ ?“^rrIsSrol^nexrected technological breakthrough. 
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(3) De'tenaine what technological and procedural ^ 

opportunities exist for changing the current system of positive 
measures in order to enhance the fail-safe and risk reduction 
capabilities of the NCCS. 

(4) Assess the impact such changes may have on US 
national policy ^ deterrence posture, military operational 
capabilities, and system costs. 

( 5 ) Produce a prioritized list of recommendations for 
changes in or additions to US Fail-safe and Risk Reduction 
measures as appropriate. 

3. Period of Tine Estimated: 1 year. 

4. Official to Whom Group Reports: Secretary of Defense. 

5. Organization Responsible for Providing Support: U.S. Nuclear 

Command and Control System Support Staff. 

6. Description of Duties: 'Functions and goals of the Executive 

Committee are to provide advice and recommendations to the 
Secretary of Defense on matters dealing within the general scope 
of activity outlined in para 2 above. 

7. Estimated Annual Operating Cost in Dollars and Man-Years: 
$488,985.00 per year/10.8 man-years. (Of this cost, $406,585 is 
programmed.) 

8. Estimated Number of Frequency of Meetings: Approximately 

eight meetings of 2-3 day duration. 

9. composition: 

a. The Secretary of Defense shall: 

(1) Designate a Chairman of -the Executive Committee from 
the membership. 

(2) Authorize the U.S. Nuclear Command and Control System 
Support Staff (NSS) to support the Executive Committee in its 
mission. 

(3) Direct the Department of Defense and the NCCS 
supporting agencies (in his role as the NCCS Executive Agent) to 
provide support as required to the study. 
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b. Membership: The Executive Committee will be limited to 

no more than five persons, three from the private sector and two 
from DoD, who will be appointed for a one year term on the basis 
of their expertise in the areas for which the committee is 
responsible. Efforts will by made to assure that the non- 
government committee members are well-balanced as to their 
represented interests and functions to be performed during the 
course of the study. Committee members will be approved by the 
Secretary of Defense using the procedures specified in "DoD 
Directive 4205.2, (CAAS)," January 27, 1986. 

10. Responsibilities: 

a. Director, Nuclear Command and Control System Support 
Staff shall: 

(1) appoint the Staff Director (Federal designated 
official) , who will be responsible for the proper functioning of 
the Executive Committee in accordance with DoD Directive 5105.4, 
"DoD Federal Advisory Committee Management Program," September 5 
1989. The Staff Director shall call the meetings, approve the 
agenda, attend each meeting, and adjourn meetings when he or she 
determines it to be in the public interest. 

b. The Chairman of the Executive Committee is responsible 

for: 

(1) assuring agenda and supporting documents that 
facilitate decision making by the Executive Committee are 
prepared and distributed well in advance of scheduled meetings. 

(2) presiding at all Executive Committee meetings. 

(3) assuring that the issues are addressed completely. 

(4) assuring appropriate reports as well as other 
documents and records of the Executive Committee, including 
financial records, are prepared and maintained on file. 

(5) assuring that the final Executive Committee report, 
covering all necessary issues, is prepared and delivered to the 
Secretary of Defense in a timely manner. 

11. Termination Date: Approximately one year from the date of 

this charter, but not longer than two years. 
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12. The executive Conmiittee shall operated in accordance with 
the provisions of DoD Directive 5105.4, "DoD Federal Advisory 
Conmittee Management Program,” September 5, 1989. 

13. Date Charter filed: 20 December 1990. 
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(U) Organization ; 

(U) As specified in the Charter, a Federal Advisory 
Committee, composed of two distinguished civilians from the 
private sector, a retired high ranking military officer and two 
high level OSD officials, was appointed by the Secretary of 
Defense. The Chairperson of the Advisory Committee was 
Ambassador Jeane J. Kirkpatrick, former U.S. Ambassador to the 
United Nations and distinguished scholar. The other members 
included the Honorable Stephen J. Hadley, Assistant Secretary of. 
Defense for International Security Policy; the Honorable Duane P. 
Andrews, Assistant Secretary of Defense (Command, Control, 
Communication and Intelligence) and Director, U.S. Nuclear 
Command and Control System Support Staff; Admiral Robert L. J. 
Long, USN (Retired) , former Vice Chief of Naval Operations and 
former Commander in Chief, U.S. Pacific Command; and the 
Honorable, Arthur B. Culvahouse, former White House legal 
counsel . 

(U) The Advisory Committee was supported by a Committee 
Staff from the U.S. Nuclear Command and Control System Support 
Staff, plus working and study groups made up of personnel from 
within the nuclear weapons command and control communities. The 
overall organization is depicted in Figure A-1. 



Figure A-1 
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(U) These groups were established by the Advisory Comiiiittee to 
conduct detailed investigations and analyses of issues. 

Following guidance of the Committee, they presented their 
findings and recommendations in a series of briefings and written 
reports which the Advisory Committee used to formulate its 
judgments, recommendations and the Final Report for the Secretary 
of Defense. The following Chairpersons of the Working and Study 
Groups were selected because of their experience and expertise in 
the areas of interest to the Fail-safe and Risk Reduction Review: 

(U) Technology Working Group : 

' Dr. Heinz W. Schmitt, Vice President, Engineering and 
Component Development , Sandia National Laboratory 

(U) Remote Destruct Study Group : 

Col Randolph M. Blanks, USAF, Chief, Strategic 
Division, Directorate of Strategic and Airlift Forces, 
Office of the Secretary of the Air Force 

(U) Positive Controls Materials & Devices Study Group : 

Mr. Scott R. Randall, Technical Director, Naval Weapons 
Evaluation Facility 

(U) Fail-safe Working Group : 

RADM Arlington F. Campbell, USN, Deputy Director, 
Defense Information Systems Agency (DISA) 

(U) Nuclear Command and Control System fNCCSl Assessment 
Study Group : 

Dr. Jeremy M. Kaplan, Deputy Director Systems 
Engineering & Integration, Defense Information Systems 
Agency, (May 1991-Dec 1991) 

Mr. Bruce J. Brown, Deputy Director Systems Engineering 
& Integration, Defense Information Systems Agency, (Jan 
1992-Present) 

(U) Weapons Systems Review Study Group : 

Col Frank M. Willingham, USAF, Chief, Nuclear Security 
Division, Defense Nuclear Agency (May 1991-Aug 1991) 
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COL Joseph P. Phillip, USA, 
Survivability and Security , 
1991-Present) 


Assistant Director, Nuclear 
Defense Nuclear Agency (Sep 


(U) Policy and Requiremen ts Study Group; 

Mr. Gregory L. Schulte, Director for 

Pol icy, ^Office of the Assistant Secretary of Defense 

(International Security Policy) 

(U) Pisk Reduction Work ing Group; 

Mrs. sally K. Horn, Director, 

Office of the Assistant Secretary of Defense 
(International Security Policy) 

ru) Shortly after the initial meetings of the Adyisory committee, 
e;necific tasking were deyeloped for each of the supporting 
working groups.^ The following are these specific taskings which 

were assigned: 

• (U) Technology Working Group (TWG) Tasking: 

m) Purpose . Support the Adyisory Committee by 
conductincr Inyestigations and developing descriptions of 
technological opportunities to implement new or improve current 
anf p?og?amed nS?lear command and control hardware software and 
Shipment related to fail-safe and/or risk reduction. 

jj. (U) Scope . Develop system technical descriptions 
which include applicability of advanced technologies and an 
assessment of technical risk, incremental performance impacts, 
additional system vulnerability, mission impact and resource 
re^i^eSInts! In coordination with the other working groups, 
develop a full discussion of pros and cons for eacn 
system/ equipment described. 

c. (U) Specific Objectives . 

1. (U) Develop technical descriptions and 
alternatives (with pros/cons and associated cost fs^imates^ in 
response to issues and initiatives identified by the Fail safe 
and Risk Reduction Working Groups. 

2. (U) Directly address the technical means of 
implementing (including a broad range of technical alternatives) 
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(a^ (U) Use of cryptographically coded 

electronic locKing all nuclear weapons systen at sea. 

fbl (U) installation of post-launch destruct 

capability on/for 

ballistic missiles approximately 30 ^ 

extended flight times (e.g., the study this specific 

minutes) . [Note: During , investigation installing 

missiles and nuclear bombs.] 


(U) 


Fail-safe Working Group (FWG) Tasking: 


th® AdvisorY Committee by 
a. (U) Purpose . Support tne 

identifying, ®”^/systims”Lso^^ fail-safe 

requirements, _„a_j ,nd control of nuclear weapons, 

and risk reduction in the co^and and^contr^ appropriate, and 

Slkfl?nd!}igffo? e^Sient and technological improvements in 
fail-safe and risk reduction. 

V. /TT\ qcone Policy and requirements review to 

b. (U) Scop g. caswif'® and CINC planning and 

examine national, and Control (NC2) process 

policy documents. Nuclear - to the lowest element 

Review to include the system from the NCA^t^ 

exercising command and _tion and facilitate decision 

and processes which J - virtually identical segments of 

making. Duplicate assessment of virtually 

the NC2 process was not required. 

c. (U) «^n®cific O bjectives. 

(U) Policy and Re quirements. 

(a) (U) Review existing nuclear command and 

control policy and iLntify guidelines and direction related 
fail-safe and risk reduction. 

fb^ (U) Identify and define nuclear command 

and control requirements related to fail-safe 
as established by national, SECDEF, ana joim, 

fc^ (U) Provide findings on . . „ ,p„- 

policy/requirements deficiencies and 
short/ long terra improvements to correct de 
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descriptions for oomand ind eS?ing 

reduction. In formats, and procedures 

communications channels, types of mess g siOP and 

used at all levels "here actions occur. ^ assistance from the 

reSS^orW:" orou^^^^^^^ system/eguipment technical 

descriptions and assessments. 

(b) (U) Adopt h/|9orous^®"^°^°l°|^ 

determine °PP°’^""^'^^tSe’^fail-Il£e measu?es for Nuclear Command 
equipment to enhance th jqIqqy facilitates identifying 

aSd Control. Insure ^he methodology fac ill associated with 

accidental and inadvertent risks as wen a 
deliberate unauthorized acts. 

(U^ Develop findings and alternatives 
. ^ exDloit opportunities to improve 

for procedures and equip . , £ nuclear weapons. For each 

the fail-safe command and control^ „„ the 

finding, develop timely assured execution and assurance 

dual requirement for ^^.meiy .. estimate of costs to 

•^“iS^ent”liSingl! clirdinale technical alternatives with the 

ieSh:S!Sgy iSrting Group for an assessment. 


(U) 


Risk Reduction Working Group (RBWG) Tasking: 


eisTM"irt-r+' the Advisory Committee by 
a (U) Purpose, . Support tne ^ . 

identifying, "^ayAewi^ng, and describing cur«^ reducing 

facilities, equipment, and procedures a accident, 

the risk of.na<=la?‘^.h?ahilities as a result^ unexpected 
miscalculation# misintcrp act Develop 

a??e?na?iv2S^nrp^S"findi^^ germane to risk reduction. 

b. (U) S^. hlmit the risk «duction 

areas under the purview ^he Department^^^ prevent or 

be on those portions of the NC2 pro result of an accident, 

mitigate against a nuclear ®^J^^"^®^r^unauthorized act. [Note; 
miscalculation, misinterpretation, , ^ include areas 

During the review this scope was exp ^ ^^t of Defense but 

outside the immediate purview of the Department 
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which included strong DoD interest as it related to nuclear risk 
reduction*] 

c. (U) Specific Objective . 

1. (U) Characterize and assess the nuclear risk 
reduction features of the NC2 process and identify opportunities 
for improvement. 

2. (U) Based on policy criteria and requirements 
for risk reduction measures received from the Policy and 
Requirements Study Group, identify current risk reduction 
measures, elements employing these measures, and what type of 
crises and/or risks these measures can mitigate against. 

3. (U) Identify any additional appropriate 
measures that could improve the existing risk reduction 
capabilities of the NC2 process. 

4. (U) Identify pros and cons of implementation 
of such risk reduction enhancements including the uncertainties 
associated with a not yet stabilized new international politico- 
military environment. 

5. (U) Provide an estimate of costs associated 
with implementing assessed enhancement options. 


(U) Participating Organizations ; 

(U) All government departments and agencies which are a part 
of the U.S. Nuclear Command and Control System were tasked with 
supporting the efforts of this Advisory Committee. Each of the 
Chairpersons of supporting working and study groups was asked to 
gather together the expertise required in order to complete the 
assigned tasking. Personnel from the following government 
organizations, agencies and offices ;prcvided supporting 
participation in the working and study groups during the conduct 
of the Nuclear Fail-safe and Risk Reduction Review; 

1. National Security Council (NSC) 

2. Central Intelligence Agency (CIA) 

3. National Communications System (NCS) 

4. U.S. Nuclear Command and Control System Support Staff (NSS) 
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Department of Energy (DOE) 

a. Deputy Assistant Secretary for Military Applications 

(DASMA) 

b. Associate Director for Weapon Safety 

c. Sandia National Laboratory (SNL) 

d. Los Alamos National Laboratory (LANL) 

e. Lawrence Livermore National Laboratory (LLNL) 

Department of Defense (DoD) 

a. Office of the Secretary of Defense (OSD) 

(1) Office of the Assistant Secretary of Defense 
(Command, Control, Communications and Intelligence 
(0ASD/C3I) 

(2) Office of the Assistant Secretairy of Defense for 
International Security Policy (OASD/ISP) 

(3) Office of the Assistant Secretary of Defense for 
International Security Affairs (OASD/ISA) 

(4) Office of the Assistant to the Secretary of 
Defense for Atomic Energy (OATSD/AE) 

(5) Office of the Principal Deputy Under Secretary of 
Defense for Strategy and Resources (OPDUSD/S&R) 

b. Defense Agencies 

(1) Defense Information Systems Agency (DISA) 

(2) Defense Intelligence Agency (DIA) 

(3) Defense Nuclear Agency (DNA) 

(4) Defense Technologies Security Administration 
(DTSA) 
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(5) National Security Agency (NSA) 

(6) Strategic Defense Initiative Organization (SDIO) 

c. Joint Chiefs of Staff (JCS) 

(1) Operations Directorate (J-3) 

(2) Strategic Plans and Policy Directorate (J-5) 

(3) Command, Control, Communications and Computer 
Systems Directorate (J-6) 

(4) Force Structure, Resource, and Assessment 
Directorate (J-8) 

d. Commanders-in-Chief of the Unified and Specified 
Commands (CINCs) 

(1) US Atlantic Command (LANTCOM) 

(2) US Pacific Command (PACOM) 

(3) US Strategic Command (STRATCOM) [Strategic Air 
Command (SAC) ] 

(4) US Space Command (SPACECOM) 

(5) North American Air Defense Command (NORAD) 

(6) US European Command (EUCOM) 

e. Military Services 

(1) US Army 

(a) Army Staff 

(b) US Army Nuclear and Chemical Agency (USANCA) 

(c) US Airmy Strategic Defense Command (USASDC) 

(2) US Air Force 

(a) Office of the Secretary of the Air Force 
(OSAF) 
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(b) Air Staff 

(c) Air Force Directorate of Nuclear Surety (AF- 
DNS) 

(d) Air Force Logistics Conunand (AF-LC) 

(e) Air Force Space Command (AFSPACECOM) 

(f) Ballistic Missile Office (BMO) 

(g) Aeronautical Systems Division (ASD) 

(3) US Navy 

(a) Navy Staff 

(b) Strategic Systems Program Office (SSP) 

(c) Cruise Missile Program Office (CMPO) 

(d) Naval Weapons Evaluation Facility (NWEF) 

(e) Naval Surface Warfare Center (NSWC) Dahlgren 

(f) Naval Sea Systems Command (NAVSEA) 

(g) Naval Air Systems Command (NAVAIR) 

(4) US Marine Corps 

(a) Office of the Commandant of the Marine Corps 
(OCMC) , Plans Division 
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(TT^ Methodology f Adv isory CotnTni'tteel.; 


(D) The Nuclear Fail-safe and 
was conducted using the methodology depicted in g. 
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Figure A-2 

Throughout the conduct of the review there was an act i^^ 

dialooue between the Advisory Committee and the wording 
siSd? li^s s^porting them. The fellowing fv® Phases of 
Mviso“ committee Stivities are identified and described. 

1. (U) Familiarization 

(U) The members of the Advisory Committee received documents 

and briefings covering pertinent background “included 

command and control of nuclear weapons. The material includea 
definition of the nuclear command and control system ( , 
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nuclear command and control (NC2) ' J^Qj'^orior studies and 

organizational responsibilities, and results of 

ongoing assessments. Site visits were inc ^ observe, 

familiarization process to lon^rSl 

first hand, a broad range of nuclear command 
processes, procedures, equipnent, personnel and 

(U) specific taskin, was provided to the Working ^and Study 

Groups which responded with _ research, or 

condScting their assigned analysis, investigation, researcn, o 

review. 

2. (U) Research 

The members of the Advisory Committee received series of 

agemlimfanrSepartLm?? 

of government. These briefings focused on developing 
understanding of: 

a (U) Existing policy and requirements for positive 
measures to prevent unauthorized or inadvertent use of U.S. 
nmc?mar%LpLs and to reduce the risk of nuclear 
hostilities occurring as a result of an accid , 
misinterpretation, or miscalculation; 

Vi fU^ Existing positive measures, in both the individual 
«;apois’ sy^tlmi Ind in the overall NCCS, for the^prev^tion 
rtf unauthorized or inadvertent launch, release, pre arming, 
SLln^nrlng: or lose of control of U.S. nuclear weapons, 

rt Existing positive measures for reducing the risk of 

any accident, misinterpretation, or miscalculation leading 
IS nuclear hostilities and for mitigating the outcome of 
such an event should one occur; 

d (U) The feasibility and desirability of implementing 
additional nuclear fail-safe and risk reduction measures, to 

include; 

(1) (U) Expanded capabilities for risk reduction, 
exchange of information, notifications and system 
ZTsnrls to promote confidence building between nuclear 

nations; 

(2) (U) Installation of post-launch destruct 
mechanisms on nuclear weapons; and 
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(31 (U) installation of coded control devices on all 

United States nuclear weapon systems. 

3. (U) Findings 

(U1 Initial findings of the Working and Study 
presented f ® provided 

^idance*^for^the Working and Study Groups' lined 

Shich focused their research efforts and more precisely defi^ned 

the scope and breadth of the study areas to 

be adM ^Sring^h"e°^n^^^^^ f.^S^re^iew^nd assi^^^^^ the 

options under consideration. 

(U1 An Interim Report (briefing) was made to ^^f^Secreta^ 
of Defense in January 1992 bn the current status on the rev le 
effort and the emerging themes that the Advisory Committee were 

considering. 

4 . (U) Option Evaluation 

(U) After considering the results of ® 

various options to improve the nuclear command 
process the Advisory Committee identified strengths an 
weaknesses of the current command and control system and 
evliSat^d the options for improvesents end 

•Fail-safe and risk reduction capabilities. In this evaluation, 
the Advisory Committee considered technical feasibility, fiscal 
costs, and time required for the implementation of such 
enhLcements as well as the potential impacts of such actions on 
National policy, deterrence posture and assured use when 
authorized. 


5. (U) Report 

(U) Working and study Groups investigations and analyses 
were documented in final reports to the Advisory Committee. 
These reports were placed in an archive m the Nuclear 

Command and Control System Support Staff offices. Aft ^ 

considering the results of the efforts of the Working and Study 
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Groups, the Advisory Coromittee made its |^”^^j^^“g|g®”iroprovements 

specific recoxrmendations and_priorit^^ ^^^ability 

and enhancements to the fail , Svstem. The Advisory 

of the U.S. Nuclear Command and Control 4 -hese 

Sl^ittee Final report was 
recommendations to the Secretary of 


A-19 

UNCLASSIFIED 


UNCLASSIFIED 


APPENDIX B 


Briefings and Places Visited 


•PATL-SAFE AND RISK REDUCTION RE V IEW ADVISORY COMMITTEE , 
CONSOLIDATED LIST OF COMMITTEE BRIEFINGS AND PLACES VISITED 


PATE TITLE 


fiPONSOR/BRIEFER 


9 May 91 JCS Overview 

(Review of the 1986 JCS 
Study on Nuclear Conanand 
and Control) 

National Nuclear Command 
and Control (NC2) Policy 


Joint Staff 


Dr. John Weinstein, 
Nuclear Command 
and Control System 
(NCCS) Support 
Staff (NSS) 


Single Integrated Operations 
Plan (SIOP) Overview 

10 May 91 NC2 Structure, Communications 
and Connectivity 

Demonstration in the 

National Military Command 
Center (NMCC) 

Code Security Brief 


Federal Advisory Act Brief 
Proposed Review Process 
Formal Committee Meeting 


Joint Staff 


Joint Staff 


Joint Staff 


Mr. Bill Marks, 

National Security 
Agency (NSA) 

DoD General Counsel 

Committee Staff 
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DATE TITLE 


SPONSOR/BRIEFER 


20 May 91 Integrated Tactical Warning and 
Attack Assessment 

Drell Commission and DOE Study 
Review 


Policy Issues Associated with 
National Security Decision 
Directive, "Nuclear Weapons 
Command and Control" 

Non-Strategic Nuclear Forces 
Weapons Design and the Role 
of Safety and Use Control 
Features 

Positive Measures to Control 
Use of Nuclear Weapons 

23-25 Jul European Command (EUCOM) 

Site Visit 

23 Jul 91 USEUCOM Stockpile Reduction 

Overview 

USEUCOM stockpile Failsafe 
Design Features 

Failsafe Related NCOS 
Deficiencies 

Implementation of NSDD 
"Nuclear Weapons Command 
and Control" within DoD 

24 Jul 91 USEUCOM Nuclear Command and 

Control 

USEUCOM Surety Briefing 

EUCOM Headc[uarters Emergency 
Action Demonstration 

B-2 


Joint Staff 


Dr. Robert Barker, 
Assistant to the 
Secretary of 
Defense for Atomic 
Energy (ATSD/AE) 

Mr. Frank Miller 
Mr. John Grimes 
(OSD) 


Joint Staff 
Sandia Nat'l Lab 


Sandia Nat'l Lab 


Committee Staff 
Committee Staff 
Committee Staff 
Committee Staff 

EUCOM Staff 

EUCOM staff 
EUCOM Staff 
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DATE TITLE 


3 Sep 91 Permissive Action Links on 

SLBMs and TLAM(N)s (Woolsey 
Report) Briefing 

Views on Nuclear Failsafe and 
Risk Reduction 


Technology Working Group Plan 


Failsafe Working Group 
Risk Reduction Working Group Plan 
is Oct 91 Views on soviet NC2 


Soviet NC2 


Soviet situation 


Other Foreign NC2 

Emergency Action Procedures of 
the CJCS, Vol IV 

SIOP 

5 Nov 91 Nuclear Weapons Safety Studies 


Policy and Requirements 
Study Group Brief 

Views on Remote Destruct of 
Nuclear Missiles 


B-4 


SPQNSOR/BRIEFER 


Amb. James Woolsey 


Dr. Richard Brody, 
Center for Naval 
Analysis (CNA) 

Dr. Heinz Schmitt 

Col R. Blanks, USAF 

Mr. Scott Randall 

RADM A. Campbell 

Mrs . Sally Horn 

Dr. Bruce Blair, 
Brookings Inst. 

Central Intelligence 
Agency (CIA) 

Mr. Art Zuehlke, 
Defense 
Intelligence 
Agency (DIA) 

CIA, DIA 

Joint Staff 


Joint Staff 


Dr. John Foster, 
Defense Science 
Board (DSB) 

Mr. Greg Schulte 
Dr. John Weinstein 

Dr. Sherman Frankel 
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DATE TITLE 


gPONSOR/BRIEFER 


10 Dec 91 Discussions with Commander 
(Cont'd) U.S. Submarine Force, Atlantic 
(COMSUBLANT) and Director, 
Strategic Systems Programs 
Office (DIRSPO) 

17 Dec 91 Positive Control Study Group 
Presentation 

Nuclear Proliferation 


VADM Henry Childs 
RADM John Mitchell 


Mr. Scott Randall 


Mr. Gordon Oehler, 
National 
Intelligence 
Officer (NIO) 
for Nuclear 
Biological and 
Chemical (NBC) 
Proliferation 


proposed DoD Use Control 
Policy 

Use Control - Joint Staff 
Perspective 

Notional Remote Destruct System 
Joint Staff Perspective 

Use Control - USAF Perspective 

Use Control - Navy Perspective 


Dr. Robert Barker, 
ATSD/AE 

Joint Staff 

Joint Staff 

USAF staff 
Navy Staff 


6 Jan 92 Emergency Action Procedures of 
the CJCS, Vol IV 

Interim Report Briefing, 
Technology Working Group 
(TWG) 

Emerging Themes - Weapons 
Systems Review Study Group 
(WSRSG) 

Risk Reduction Working Group 
(RRWG) Key Themes 


Joint Staff 


Dr. Heinz Schmitt 
Col R. Blanks, USAF 
Mr. Scott Randall 

COL Joe Phillip 


Mrs. Sally Horn 
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DATE TITLE 


SPONSOR/ BRIEFER 


22 Jan 92 Feasibility of Coded Control 
Devices (CCDs) 

Positive Control Devices - 
Pros and Cons 

Post-Launch Destruct Devices - 
Pros/Cons 

Formal Committee Meeting 

29 Jan 92 Interim Report Delivered to 
SECDEF 

6 Mar 92 Weapons Systems Review Study 
Group (WSRSG) Options 

NC2 Facility Security - 
”60 Minutes” Tape 

Personnel Reliability Program 
and Security 

20 Mar 92 Use Control Devices 

Effectiveness Assessment 


Remote Destruct Study Group 
(RDSG) Options 

Positive Control Materials 
& Devices Study Group 
(PCMDSG) Options 

2 Apr 92 Views on Post Launch Destruct 

NCCS Assessment Study Group 
(NASG) Options 

RRWG Options 

24 Apr 92 Safety, Security, and 

Dismantlement Options 


Mr. Scott Randall 


Dr. Heinz Schmitt/ 
RADM A. Campbell 

Dr. Heinz Schmitt/ 
RADM A. Campbell 


COL Joe Phillip 


Col Robert Pike 
(OSD) 

Mr. Jeff Everett, 
NSS/Mr. Vern Willen, 
Department of Energy 

Col Randolph Blanks 


Mr. Scott Randall 


Dr. Kosta Tsipis 
Mr. Bill Thoms 

Mrs. Sally Horn 

Dr. Robert Barker, 
ATSD/AE 
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24 Apr 92 Intelligence Update - Former 
(Cont'd) Soviet Union Weapons Matters 


DOD NCOS Oversight 
NASG Assessments I 

30 Apr 92 Views on Post Launch Destruct 
Computer Security 

DoD/DOE "Delay" Programs 


15 May 92 Views on Post Launch Destruct 

RDSG Final Assessment 

PCMDSG Final Assessment 

5 Jun 92 Strategic Defense Initiative 
Discussion 

2 Jul 92 Views on Failsafe and Risk 
Reduction 

RRWG Assessment (Issues #5, 6) 
NASG Assessment II 
WSRSG Assessment I 
16 Jul 92 WSRSG Assessment II 


Dr. Larry Gershwin 
National 
Intelligence 
Officer for 
Strategic System 

LCDR Rick Hagy# NSS 

Mr. Bill Thoms 

Dr. Richard Garwin 

Mr. Dan Ryan, 

OSD 

Mr. Jeff Everett/ 
Dr. Ray Reynolds/ 
Mr. Sanders/ 

Col Robert Pike 

Dr. Sherman Frankel 

Col Randolph Blanks 

Mr. Scott Randall 

Amb. Henry Cooper 


Dr. Fred Ikle 


Mrs. Sally Horn 
Mr. Bill Thoms 
COL Joe Phillip 
COL Joe Phillip 
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16 Jul 92 RRWG Assessment (Issue 10) 

(Cont'd) - Intelligence Support related 
to Risk Reduction 

- DOD Efforts to Counter 
Proliferation 

- Intelligence Community Efforts 
to Support Countering 
Proliferation 

- strategic and Tactical Warnxng 
of Nuclear Attack 


11 Aug 92 PRSG Assessment 

WSRSG Specific Issues Briefing 
OCONUS Site Security Review 


Mr. Brooks Shelton 

Mr. Sokol sky 

Mr. Gordon Oehler 

Mr. Bill Thoms 

Mr. Gary Betourne 
COL Joe Phillip 
COL Joe Phillip 


8 Sep 92 Final Report Deliberations 
(Executive Session.) 

25 Sep 92 Final Report Deliberations 
(Executive Session) 

30 Oct 92 Formal Meeting, Approval of 
Final Report 
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Working and Study Groups 


BRIEFINGS AND PLACES VISITED 


Technology Working Grou 
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LOCATION 



UNCLASSIFIED 




UNCLASSIFIED' 


SPONSOR/ BRIEFER/ 
LOCATION 







TITLE 


UMCZASSIFIED 


fiPONSOR/BRIEFERi 
T.QCATION 
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DATE 


TITLE 


SPONSOR /BRIEFER/ 
TOCATION ■ 
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LOCATION 
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DATE 


TITLE 


UNCLASSIFIED' 


SPONSOR/BRIEFERZ 
T.OCATION 


4 Oct 91 Tamper Detection Technology 


Sandia Nat'l Labs 
Albuquerque , NM 


4 Oct 91 Threat Definition 


13 Feb 92 ICBM Command and Control 


National Security 
Agency (NSA) 

National Security 
Agency (NSA) 


1 Nov 91 Unauthorized Launch Analysis 
(ULA) Methodology/Results 


1 Nov 91 Unauthorized Launch Analysis 
(ULA) Methodology/Results 


1 Nov 91 Unauthorized Launch Analysis 
(ULA) Methodology/Results 


4 Oct 91 Misc. Navy Nuclear Weapon 
System Studies 

4 Oct 91 stockpile Improvement Studies 


Air Force 

Directorate of 
Nuclear Surety 
(AFDNS) 

Cmiise Missile 
Program Office 
(CMPO) 

Strategic Systems 
Program Office 
(SSPO) 

Sandia Nat'l Labs 
Albuquerque , NM 

Sandia Nat'l Labs 
Albuquerque, NM 


Fail Safe Working Groupj_ 

Weapons System Review Study Group (WSRSG)„.;_ 

ACTIVITIES VISITED; BRIEFINGS 

r>ATF TITLE SPONSOR/BRIEFER/ 

' LOCATION 

17 Jun 91 Unauthorized Launch Army Nuclear and 

Analysis (ULA) Methodology, Chemical Agency, 

site Security Survey Fort Belvoir, VA 

Results & Nuclear Safety Program 
Overview 


B-18 


UNCLASSIFIED 


DATE 


TITLE 


UKCLASSIFZED 


SPONSOR /BRIEFER/ 
T.OCATION 


21 Jun 91 Air Force Nuclear Safety Program 
- Oveirview 


22 Jun 91 


Air Force Safety 
Agency, Det 1, 
Kirtland AFB, NM 


25 Jun 91 Nuclear Weapon Stockpile 
Characteristics 


Defense Nuclear 
Agency, 

Alexandria, VA 


25 Jun 91 JCS NC2 Study Relative 
to WSRSG Charter 


17 Sep 91 Navy Nuclear Weapons 

Safety Program Overview 
& TLAM-N ILA Methodology 


18 Sep 91 Inadvertent Launch 

Analysis (ILA) 

19 Sep 91 results on ICBMs & 

Air Force Bombs; & 
TLAM-N Unauthorized 
Launch Analysis (ULA) 
methodology 

6 Nov 91 Tamper-Indicator 

Vulnerabilities & 
Evolving Technologies 

13 Nov 91 Fleet Operations Overview 


12 Dec 92 Weapon Vulnerabilities 


21 Jan 92 DOE'S One-Point Safety 
Certification Program 
& New Diagnostic 
Tools 


Nuclear Command & 
Control System 
Support Staff, 
Washington, DC 

Naval Weapons 
Evaluation 
Facility, 
Kirtland AFB, NM 

Air Force Safety 
Agency , Det 1 
Kirtland AFB, NM 


Army Armament R&D 
Engineering 
Center, Dover NJ 

Commander in Chief, 
Atlantic, Norfolk, 
VA 

National Labora- 
tories Complex, 
Livermore , CA 

Los Alamos National 
Laboratory , Los 
Alamos, NM 
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UNCLASSIF-IED 


DATE 


TITLE 


UNCLASSIFIED ' 


RPONSQR/BRIEFERZ 
T.OCATION 


22 Jan 92 Air-launched Cruise 

Missile ILA method- 
logy & results 

10 Feb 92 Trident ULA Methodology 


14 Feb 92 TLAM-N ULA results 


7 Apr 92 Nuclear Safety Program 

Overview 

8 Apr 92 Remote Destruct Options 

& Use Control Overview 

1 May 92 Trident ULA & ILA Results 


12 May 92 Software Security 

Program & Planning 


14 May .92 Procedures & Systems for 
Locating Lost/Stolen 


21 May 92 Navy Weapon Storage 

Site Security Program 
& Problems 

28 Jul 92 Site Security Folders & 
Contingency Planning 


Air Force Safety 
Agency, Det 1 
Kirtland AFB , NM 

Strategic Systems 
Program Office, 
Arlington, VA 

Cruise Missile 
Program Office, 
Arlington, VA 

Field Command, DNA, 
Albuquerque, NM 

Sandia Nat'l Labs, 
Albuquerque, NM 

Strategic Systems 
Program Office, 
Arlington, VA 

Defense Information 
Systems Security 
Program, 
Washington, DC 

DOE , Nevada 

Operations Office, 
Las Vegas , NV 

Marine Corps 

Security Force, 
Norfolk, VA 

Defense Nuclear 
Agency, 

Alexandria, VA 


ACTIVITIES VISITED! DEMONS TRATIONS /TOURS 

12 Aug 91 Nuclear Weapons Recovery 
Exercise 

18 Aug 91 


Anderson AFB 
Guam , MI 
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UNCLASSIFIED 


UNCLASSIFIED 


SPOrJSQR/BRIEFERi 
T.QCATION 




UNCLASSIFIED 


fiPONSQR/BRIEFERy 
LOCATION 



X 





UNCLASSIFIED 


RPQNSOR/BRIEFER/ 
LOCATION 





UNCLASSIFIED 


gpnwSOR/BRIEFERy 

location 






UNCLASSIFIED 


SPQNSOR/BRIEFER/ 
LOCATION 





UMCLASSIFIED 


SPONSOR/BRIEFERy 
LOCATION 






DATE 


TITLE 


UNCLASSIFIED 


SPONSOR /BRIEFER/ 
LOCATION 



UNCLASSIFIED 






UNCLASSIFIED' 

DATE TITLE 

2 Mar 92 NMCC Operations 

20 Apr 92 Joint Staff Review of Briefing 

Risk Reduction Working Group fRRWG) : 

DATE TITLE 


23 Sep 91 Security of Soviet Nuclear Weapon 
Storage Sites 

Security of Soviet Nuclear Weapon 
Units 

Soviet Nuclear Command and Control 
Safeguards 

26 Sep 91 Third-world Countries and Nuclear 
Proliferation 

10 Oct 91 PRC Nuclear Command and Control 
Terrorism 


21 Nov 91 Preliminary Failsafe & Risk 
Reduction Options of Farr 
Technology Working Group 

12 Dec 91 Nuclear Proliferating States 

10 Jan 92 Chinese Nuclear Command and 
Control Issues 


B-28 

UNCLASSIFIED 


SPONSOR/BRIEFER/ 
LOCATION 

Joint Staff 
Pentagon 

DISA at Pentagon 

SPONSOR/BRIEFER/ 
LOCATION 

DIA 

I 

DIA 

DIA 

NSS 

NIO/DIA 

Los Alamos Nat'l 
Labs (DOE) 



Excerpt from the FY 


91 DoD Authorization Act (P.L. 101-510). 


"Sec 1441. SENSE OF CONGRESS ON ADDITIONAL NUCLEAR RISK REDUCTION 
MEASURES 

(a) FINDINGS. — Congress makes the following findings. 

(1) on June 1, 1990, the President of the United States and 
the President of the Soviet Union signed a document 

"Joint Statement on Future Negotiations on Nuclear and Space Arms 

and Further Enhancing Strategic Stability”. nursue 

(2) In that document, the two nations pledged to pursue 
additional confidence-building and predictability measures 
would reduce the possibility of an 

result of accident, miscalculation, terrorism, or 

technological breakthrough, and would prevent possible incidents 

between them . recent increase in ethnic, national, 

economic and political tensions within the Soviet Union concern 
has heightened regarding the possible unauthorized or accidental 

°^4)°It^has^been four^years since the Department of Defense 
conducted a comprehensive review of its nuclear contro 
ri-rncedures cind failsafs itiechanisins* 

procedures^anfloint Staff, in its 1990 Joint Mllita^ 

Net Assessment, concluded that with ° deterrence 

global security environment "the risk of nuclear deterrence 

failing is assessed to be low and at this moment to be 

(6) While Congress is concerned about continued strategic 
offensive aid defeLive modernization by 

unnr edict able status of the domestic situation in the Soviet 
Union, at this stage the lessened prospects that nuclear weapons 
of the United States might have to be employed may afford an ^ _ 

opportunity to reconsider past reluctance to use certain positive 
control measures, such as the installation of 

links (PALS) on nuclear weapons deployed at sea by the United 
States and the installation of post-launch destruct mechanisms on 
intercontinental ballistic missiles (ICBMs)^and submarine 
launched ballistic missiles (SLBMs) deployed by the , , 

States, as long as appropriate security measures can be developed 
to protect the integrity of such destruct mechanisms. 

^ (7) on September 15, 1987 the Untied States and the Soviet 
Union agreed to establish. Nuclear Rick Reduction Centers (NRRCs) 
in Washington and Moscow. 

(8) The NRRCs have made a useful contribution to lowering 
the risks of accidental or inadvertent nuclear war and are 
capable of taking on expanded roles. 


(b) 


SENSE OF CONGRESS. — It is the sense of Congress -- 
(1) that the President of the United States and the 


I JL i Wild w JT J- .1.VAW** w w— — - — . . • 

President of the Union of Soviet Socialist Republics ®JJ® 
commended for their June 1, 1990, joint sta emen p 


additional nuclear confidence-building measures; and 

( 2 ) that, in keeping with that joint statement, the 

President — . . . *-v,« 

(A) should invite the Soviet Union to 30 m with tne 

United States in conducting separate but parallel, comprehensive 
reviews of each nation's own nuclear control procedures and 

failsafe mechanisms; and 

(B) should propose to the Soviet Union that 
representatives of the two nations engage in discussions with the 
objective of agreeing on additional roles and functions that 
could be assigned to the Nuclear Risk Reduction Centers to 
further lessen the risks of the outbreak of nuclear war as the 
result of misinterpretation, miscalculation, or accident. 

(c) REPORT ON ADDITIONAL MEASURES. — Not later that March 1, 

1991 the President shall submit to Congress a report (in both 
classified and unclassified form) assessing additional nuclear 
risk reduction measures which could be implemented pursuant to 
the joint statement of June 1, 1990, referred to in subsection 

(b) , including the following: 1 

(1) Assigning to the Nuclear Risk Reduction Centers (NRRCs) 

such expanded roles as the following: 

(A) Serving as a forum for discussions between the two 
nations on responding to possible nuclear terrorism. 

(B) Transmitting notifications that may be required 
under future arms control treaties. 

(C) Transmitting non-urgent notifications and 
information recpiests required under Article 5 of the 1971 
Agreement on Measures to Reduce the Risk of Outbreak of Nuclear 
War Between the United States and the Union of Soviet Socialist 

Republics. . . ^ ^ 4 .W 

(D) Providing a forum for discussions between the 

United States and the Soviet Union on restricting nuclear, 
chemical and missile proliferation. 

(E) Serving as a meeting place for high-level military 
discussions on nuclear doctrine^, forces and activities, and 
regional security concerns. 

(2) Installation of post-launch destruct mechanisms on all 
intercontinental ballistic missiles (ICBMs) and submarine 
launched ballistic missiles (SLBMs) -deployed by the United 
States. 

(3) Installation by the Untied States of permissive action 

links (PALs) on all nuclear weapons at sea." i 


UNCLASSIFIED WITH 
SECRET ATTACHMENTS 



THE WHITE HOUSE 
WASHINGTON 

June 12, 1991 


Dear Mr. President: 

Enclosed are copies of the unclassified report assessing 
possible additional nuclear risK reduction measures reguested 
by the Congress in section 1441 of the National Defense 
Authorization Act for Fiscal Year 1991 (Public Law 101-510) . 
Also enclosed is a classified annex to the report. 

The Administration is actively engaged in a variety of 
efforts to reduce further the risk of conflict between the 
United States and the U.S.S.R. After careful review of the 
measures specified by the Congress, the report has concluded 
that effective bilateral mechanisms are in place to address 
concerns such as nuclear terrorism and nuclear, chemical, and 
missile proliferation. Similarly, U.S. initiatives already 
have resulted in expanded use of the Nuclear Risk Reduction 

Centers (NRRCs) to transmit, information required . under 

additional arms control agreements. 

At the same time, our report has identified possible steps 

that were not mentioned in section 1441. These steps 

expanding the conference facility available to the U.S. NRRC 
and establishing a government-to-government video conferencing 
facility located in the NRRCs ~ both require further internal 
review. 


Sincerely, 



The Honorable Dan Qiiayle 
President of the Senate 
Washington, D.C. 20510 


UNCLASSIFIED WITH 
SECRET ATTACHMENTS 




UNCLASSIFIED WITH 
SECRET ATTACHMENTS 



THE WHITE HOUSE 

WASH I NGTO N 

June 12, 1991 


Dear Mr. Speaker; 

Enclosed are copies of the unclassified report assessing 
possible additional nuclear risk reduction measures requested 
by the Congress in section 1441 of the National Defense 
Authorization Act for Fiscal Year 1991 (Public Law 101-510) . 
Also enclosed is a classified annex to the report. 

The Administration is actively engaged in a variety of 
efforts to reduce further the risk of conflict between the 
United States and the U.S.S.R. After careful review of the 
measures specified by the Congress, the report has concluded 
that effective bilateral mechanisms are in place to address 
concerns such as nuclear terrorism and nuclear, chemical, and 
missile proliferation. Similarly, U.S. initiatives already 
have resulted in expanded use of the Nuclear Risk Reduction 
Centers (NRRCs) to transmit information required under 
additional arms control agreements. 

At the same time, our report has identified possible steps 
that were not mentioned in section 1441. These steps — 
expanding the conference facility available to the U.S. NRRC 
and establishing a governme,nt-to-government video conferencing 
facility located in the NRRCs — both require further internal 
review. 


Sincerely, 



The Honorable Thomas S. Foley 
Speaker of the 

House of Representatives 
Washington, D.C. 20515 


UNCLASSIFIED WITH 
SECRET ATTACHMENTS 




ASSESSMENT OF POSSIBLE ADDITIONAL NUCLEAR 
RISK REDUCTION MEASURES 


Section 14U1 of the National Defense Authorization Act for 
Fiscal Year 1991 (P.L. 101-510) requests the President to "submit 
to Congress a report (In classified and unclassified form) assessing 
additional nuclear risk reduction, measures which could be Implemented 
pursuant to the (U.S.-USSR) joint statement of June 1, 1990... In- 
cluding the following: 

"(1) Assigning the Nuclear Risk Reduction Centers (NRRCs) 
such expanded roles as the following; 

"(A) Serving as a forum for discussions between the two 

nations on responding to possible nuclear terrorism. 

"(B) Transmitting notifications that may be required under 
future arms control treaties. 

"(C) Transmitting notifications and Information requests 
required under Article 5 of the 1971 Agreement on 
Measures to Reduce the Risk of Outbreak of Nuclear 
War Between the United States and the Union of Soviet 
Socialist Republics ("Accidents Measures" Agreement). 

"(D) Providing a forum for discussions between the United 
States and the Soviet Union on restricting nuclear, 
chemical, and missile proliferation. 

"(E) Serving as a meeting place for high-level military 

discussions on nuclear doctrines, forces and activities, 
and regional security concerns. 

"(2) Installation of post-launch destruct mechanisms on all 

Intercontinental ballistic missiles (ICBMs) and submarine 
launched ballistic missiles (SLBMs) deployed by the United 
States. 

"(3) Installation by the United States of permissive action 
links (PALs) on all nuclear weapons at sea." 

This report, prepared by the Secretary of Defense in coordination 
with the Joint Staff, Department of State, Arms Control and 
Disarmament Agency, Department of Energy, Director of Central 
Intelligence, and Director of the NRRC, responds to the Congressional 
request. Part I addresses questions related to possible additional 
roles for NRRCs. Part II addresses questions related to post-launch 
destruct mechanisms and PALs. Part III is a classified annex to 
the report. 
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PART I ; 

BACKGROUND 

As a result of an initiative by the United States, President 
Reagan and General Secretary Gorbachev agreed at the November 
1985 Summit In Geneva to explore the possibility of establishing 
centers to reduce the risk of conflict between the United States 
and the USSR — in particular, the risk of nuclear war as a 
result of misinterpretation , miscalculation , or accident. Following 
a series of expert meetings and formal negotiations, the Agreement 
Between the United States of America and the Union of Soviet 
Socialist Republics on the Establishment of Nuclear Risk Reduction 
Centers (and Protocols thereto) was signed in Washington on September 
15, 1987, by Secretary of State Shultz and Foreign Minister 
Shevardnadze . 

Under the Agreement, which is of unlimited duration, each 
Party agreed to establish a Nuclear Risk Reduction Center (NRRC) 
in its capital and to establish a special facsimile link between 
these centers. NRRCs became operational on April 1, 1988. The 
U.S. NRRC is located in the Department of State and staffed by 
U.S. personnel. The Soviet NRRC la located in the Soviet Ministry 
of Defense and staffed by Soviet personnel. The Soviet NRRC 
operates as a counterpart to both the U.S. NRRC and the U.S. 

On-Site Inspection Agency. 

NRRCs are Intended to complement existing means of communication 
and provide direct, reliable, high-speed systems for transmitting 
notifications and communications at the Government— to— Government 
level. NRRCs can rapidly transmit full text and graphics in a 
disk-to-disk or facsimile format by direct satellite link. In 
this respect, NRRCs have a communications capability very similar 
to — but separate from — the modernized Direct Communications 
Link (Hot Line), which is reserved for communications at the Head 
of Government level, i.e., between the' President of the United 
States and his Soviet counterpart. 

It is important to note that NRRCs do not replace normal 
diplomatic channels of communication or the Hot Line; nor are 
they Intended to have a crisis management role. The principal 
function of NRRCs is to exchange information and notifications as 
required under certain existing and possible future arms control 
and confidence-building agreements. 

There are two Protocols to the Agreement. Protocol I identifies 
notifications that the Parties agreed to exchange on NRRC satellite 
links. These Include ballistic missile launch notifications 
required under Article 4 of the 1971. Agreement on Measures to 
Reduce the Risk of Outbreak of Nuclear War ("Accidents Measures 
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Agreement) and under paragraph 1 of Article VI of the 1972 Agreement 
on the Prevention of Incidents on and over the High Seas. The 
Agreement also provides that the list of notifications transmitted 
through NRRCs may be altered by the Parties as relevant new 
agreements are reached. (Alterations to the list of notifications 
made since September 1987* and the prospects for future alterations, 
are are discussed below -- see section on "Transmitting notifications 
that may be required under future arms control treaties.**) The 
Parties may use NRRCS to transmit communications other than those 
specified under the Agreement "as a display of good will and with 
a view toward building confidence." 

Finally, to help ensure the smooth operation of NRRCs, the 
Agreement calls for regular meetings at least once a year between 
representatives of the two national centers to discuss operation 
of the system. 

ASSESSMENT OF ADDITIONAL ROLES FOR THE NRRCS 

The Administration has reviewed carefully the five possible 
additional NRRC roles specified in Section 1441. Our analysis 
and conclusions with regard to each of those five possibilities 
is explained below. In addition, the Administration has identified 
certain possible steps with regard to NRRCs that were not identified 
in Section 1441. These steps merit further study by the 
Administration, and no final decisions have been made. 

(1 ) Using NRRCs "as a forum for discussions between the two 

nations on responding to possible nuclear terrorism. 

The United States has a longstanding and continuing commitment 
to prevent further spread of nuclear weapons, including their 
acquisition, fabrication, or possible use by subnational groups 
or terrorist organizations. 

Internal U.S. efforts in this regard involve a broad spectrum 
of physical security, technological safeguards, personnel screening 
procedures, and emergency response measures designed to minimize 
absolutely the risks of any successful terrorist action directed 
against nuclear-related facilities In the United States or U.S. 
nuclear weapon-related activities (e.g., stockpiles or transshipment) 
overseas. These efforts are supported by a variety of programs 
aimed at Identifying, at the earliest possible time, any potential 
terrorist-related activity directed against U.S. or foreign 
nuclear-related assets. In addition, the United States participates 
In bilateral and multilateral arrangements — for example, within 
NATO — designed to maintain the highest possible safety and 
security standards for U.S. nuclear weapon— related activities 
overseas, and to respond In a timely and effective manner In the 
event of a nuclear-related accident or Incident , Including potential 
terrorist-related activity. It Is clear, however, that details 
of such arrangements and contingency plans can involve extremely 


n. 


sensitive information, protection of which is of critical importance 
to the national security of the United States and that of our 
closest friends and allies. 

Bilateral exchanges with the USSR on Issues related to 
nuclear non-proliferation, nuclear-weapons security, and inter- 
national terrorism have taken place and will continue to take 
place in a variety of fora and locations (often outside national 
capitals), and at different levels -- including ministerial-level 
discussions Involving the Secretary of State, Secretary of Defense, 
and their respective Soviet counterparts. Frequently, these 
exchanges Include various types of experts from several U.S. 
agencies, and take place within the context of meetings covering 
a much broader agenda of bilateral issues. In addition, steps 
have been taken In recent years to facilitate direct communications 
between the sides In the event of certain nuclear Incidents (see 
(3) below). Thus, while a U.S. NRRC conference facility could 
serve as one of many possible venues for discussions with the 
USSR on Issues related to nuclear terrorism (see section below on 
"Other possibilities under consideration") and the NRRC staff 
could provide administrative support for such a meeting. It would 
not be appropriate to make' the NRRC facility a principal or 
standing "forum" for such discussions, or Involve the NRRC In 
substantive preparations for such discussions. 

In this context, the Administration believes that It would 
be Inappropriate to expand the role of NRRCs to Include substantive, 
functions such as U.S. -Soviet coordination or crisis management 
Involving possible nuclear terrorism. Such a role was never 
contemplated by the sides during negotiation of the NRRC Agreement, 
and would run counter to deliberate U.S. policy decisions on the 
appropriate functions, staffing, and technical capabilities of 
the U.S. NRRC. The underlying rationale for these policy decisions 
1s straightforward: transforming the NRRC Into a substantive 
coordination or crisis management mechanism (e.g., for nuclear 
terrorism) could seriously jeopardize U.S. ability to protect 
sensitive Information, conduct thorough Internal analysis and 
evaluation of any potential threat,' reach policy decisions through 
existing and effective crisis-management mechanisms, and Implement 
necessary countermeasures In coordination, as appropriate, with 
our friends and allies. 

(2) Transmitting notifications that may be required under 
future arms control treaties 

Since signature of the NRRC Agreement in September 1987, the 
United States and USSR have agreed to use the NRRC to transmit 
information required under four additional arms control-related 
agreements ; 
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-- Notifications required under the 1987. INF Treaty. These 
include, for example, data updates, inspection-related 
notices, requests for cooperative measures, and proposed 
meetings of the Special Verification Commission. As of 
February 1, 1991, a total of 5,348 such notifications 
have been exchanged through NRRCs , 

— Notifications under the 1988 Ballistic Missile Launch 
Notification Agreement, which provides that each side 
will notify the other, no lees than 24 hours in advance, 
of the planned date, launch area, and area of impact for 
any launch of an ICBM or SLBM. As of February 1, 1991, 
a total of 225 such notifications have been exchanged 
through NRRCs. 

— Notifications under the Threshold Test Ban Treaty (TTBT) 

and Peaceful Nuclear Explosions Treaty (PNET) and their new 
verification protocols, which were ratified and entered 
into force in 1990. These Include advance notice of 
certain planned nuclear tests, information on test 
conditions, notices of movement of inspection personnel 
and their on-site monitoring equipment, and requests 
for meetings of the Bilateral and Joint Consultative 
Commissions. As of February 1, 1991, a total of 20 
such notifications have been exchanged through NRRCs. 

— Notifications under the 1990- O.S.— USSR Bilateral Chenical . 
Weapons Destruction Agreement. These Include notifications 
regarding inspectors, aircrew members, and aircraft 
flight plans of the Inspecting Party. Information 
exchanged also will include notification of the intent 
to carry out an inspection and notifications regarding 
the transfer of chemical weapons pursuant to the Agreement. 

Although the START treaty has not yet been completed, it is 
anticipated that several types of notifications — Including data 
updates, notices of movement of certain START-accountable systems, 
inspection-related information, cooperative measures, and proposed 
meetings of the Joint Compliance and Inspection Commission -- 
will be handled by the NRRCs. This would Increase significantly 
the volume of message traffic processed through NRRCs. 

By providing a direct, rapid, and reliable government-to- 
government communications link for transmitting such notifications 
(and clarifications of notifications, when necessary), NRRCs have 
contributed to U.S. efforts to verify Soviet compliance with and 
effectively Implenent new arms control agreements. In addition, 
NRRCs have been very useful in other instances. For example, 
pursuant to the Agreement's provision for "good will" notifications. 


^ See Part III annex 
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the sides have used NRRCs to transmit information on deorbiting 
satellites. Similarly, in the context of the 1989 agreement 
between the U.S. and USSR to exchange advance notifications of 
certain strategic military exercises, which resulted from Secretary 
of Defense Carlucci's proposal to Minister of Defense Yazov, the 
sides agreed to provide such notifications through NRRCs. 

Possible additional notification responsibilities for NRRCs 
will depend on the nature of new arms control and confidence- 
building measures agreements. In the case of the 1990 Conventional 
Forces in Europe (CPE) Treaty and Vienna Document on Confidence 
and Security Building Measures (CSBMs) Agreement, for example, 
the multilateral nature of the agreements and the notifications 
required therein means that the NRRC , a strictly bilateral link, 
cannot be the sole mechanism for the United States and USSR to 
provide necessary notifications. It may be advisable, however, 
to use the NRRC as a "back-up" link to ensure timely transmittal 
of CFE and CSBMs notifications between Washington and Moscow, 
while using other means — e.g., existing diplomatic channels or 
a new, dedicated multilateral communications system under consideration 
among the parties to the Vienna Document — to provide notifi- 
cations to other treaty signatories. A multilateral CFE Communi- 
cations Center, under the supervision of the Director of the NRRC, 

Is currently being established within the Department of State. 

Of course, any expansion of the list of notifications provided 
through NRRCs must be agreed between the sides. The United 
States, for example, has responded positively to a Soviet suggestion 
to use NRRCs In the event time-urgent communications between 
capitals to help complement communications procedures established 
under the 1989 Agreement on the Prevention of Dangerous Military 
Activities. The USSR, however, has not followed through on the 
U.S. response. 

(3) Transmitting non-urgent notifications and Information . 
requests required under Article 5 of the 1971 "Accidents 
Measures" Agreement . 

As a result of a U.S. Initiative, the United States and USSR 
signed a Common Understanding to the "Accidents Measures" Agreement 
In June 1985. The Common Understanding clarifies their obligations 
to consult In the event of a nuclear incident Involving unknown 
or unauthorized parties. ^ 

Article 6 of the "Accidents Measures" Agreement specifies 
that the sides "shall make primary use" of the Hot line for 
transmission of urgent information, notifications, and requests 
for information in situations requiring prompt clarification." 
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See PART III annex 
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While the United States does not exclude the possibility of using 
NRRCs for notifications required under Article 5, the United 
States sees no benefit In seeking an explicit agreement with the 
USSR — i.e., a change to the “Accidents Measures'* or NRRC 
Agreements --for this purpose. Moreover, given the critical 
national security concerns that possibly would be raised with any 
nuclear Incident relevant to the “Accidents Measures' Agreement, 
use of the Hot line — which remains, of course, a Presidential 
prerogative -- may be advisable for both policy and operational 
reasons . 

( 4 ) Providing a forum for U.S.-USSR discussions on restricting 
nuclear, chemical, and missile proliferation. 

As mentioned In (1) above, bilateral exchanges with the USSR 
on issues related to nuclear non-proliferation have taken place, 
and will continue to take place, in a variety of fora and locations 
(often outside national capitals), and at different levels. The 
same is true for exchanges on restricting chemical weapons and 
missile proliferation. Frequently, these exchanges Include 
experts from several U.S. agencies, and take place within the 
context of meetings covering a much broader agenda of bilateral 
Issues. Thus, while a NRRC conference facility could serve as one 
of many possible venues for discussions with the USSR on prolifer- 
ation issues, and the NRRC staff could provide administrative 
support for such discussions, lack of a forum has not been an 
impediment to such discussions. It would not be appropriate to 
make the NRRC facility a principal or standing “forum" for such 
discussions, or involve the NRRC in substantive preparations for 
such d'iscusslons . 

( 5 ) Serving as a meeting place for high-level military discussions 
on nuclear doctrines, forces, activities, and regional 
security concerns . 

High-level defense official contacts and discussions involving 
the United States and USSR, including mllitary-to-milltary contacts, 
have Increased significantly in recent years. Examples of substantive 
meetings in 1990 included the following: 

-- In January, the Chairman of the Joint Chiefs of Staff 
met with the Chief of the General Staff of the Soviet 
Armed Forces at the Vienna CSBM Conference discussions 
on military doctrine. 

— In March, the first meeting of the Joint Military Commission 
(established by the Agreement on the Prevention of 
Dangerous Military Activities) met at MacDill AFB, Florida. 

-- In May, the U.S. Delegation for the Incidents at Sea 

Agreement visited the USSR, as did the Assistant Secretary 
of the Air Force, 



In June, the Principal Deputy Under Secretary of Defense 
for Policy met In Moscow with the Chairman of the Supreme 
Soviet Committee on Defense and State Security, as well 
as a senior military adviser to President Gorbachev. 

-- In September, the Chief of the General Staff of the 
Soviet Armed Forces visited the United States. 

-- In October, the Secretary of Defense visited the USSR 
for meetings with the Soviet defense and political 
leadership, including unprecedented visits to Soviet 
military facilities. 

In November, the Chief of Staff of the U.S. Army visited 
the USSR. 

In December, members of the Joint Staff and Soviet General 
Staff conducted staff talks at the Pentagon. 

In addition, senior U.-S. defense and military representatives 
participate actively on U.S. delegations to a range of high-level 
bilateral meetings , including summits, minis terlals , and arms 
control negotiation, implementation and compliance fora. In 
fulfilling their roles on such delegations, they frequently 
interact with counterpart s in the Soviet defense establishment. 

Topics raised by both sides during such exchanges often 
Include, but are not limited to, nuclear-related and doctrine 
Issues. In addition, the substantive and confidence-building 
value of discussions between senior defense and military officials 
clearly has been enhanced by conducting such discussions in a 
wide variety of locations. Including the Pentagon, U.S. and 
Soviet military bases, and other defense-related facilities. For 
these reasons, it would be Inappropriate, and in some cases 
counterproductive, to seek to use NRRCs as a focal point for 
such discussions. 

OTHER POSSIBILITIES UNDER CONSIDERATION 

In reviewing the possible future role of the NRRCs, the 
Administration tentatively has identified two areas for further 
consideration. Both require further internal review of their 
practicability, cost effectiveness, and security implications. 

One possibility would be to expand the conference facility 
available to the U.S. NRRC , which currently consists of a single 
conference room adjacent to the NRRC communications office in the 
Department of State. The purpose of this conference facility 
would be to provide a venue for the increasing number of U.S. -Soviet 
meetings of officials and experts working on implementation and 
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compliance of arms control treaties. While the United States 
can find suitable meeting places, a NRRC facility might offer an 
economical and politically symbolic alternative. For example, an 
expanded NRRC conference facility could provide the administrative 
setting for meetings of the U.S.-USSR Coordinating Group (a 
subgroup of the Bilateral Consultative Commlsaion established by 
the TTBT), which must meet in Washington to coordinate U.S. and 
Soviet activities regarding Soviet in-country monitoring of U.S. 
nuclear tests. Similarly, such a facility could provide a setting 
for appropriate meetings under the auspices of the Special Verifi- 
cation Commission established by the INF Treaty, or the Joint 
Compliance and Inspection Commission to be established under 
START. The meetings held in the NRRC conference facility would 
complement, not replace, meetings of such arms— control implementation 
and compliance— related bodies or components thereof that are more 
appropriately held in Geneva. Es t abl is hme nt of such a conference 
facility in the U.S. NRRC would not require agreement with the USSR. 

The second possibility would be to consider establishing a 
government-to— government video conferencing facility that would 
be located, for administrative purposes, in NRRCs. One purpose 
of such a facility would be to allow the sides to exchange views 
directly — for example, on Issues that likely would not require 
protracted discussion and negotiation — — without always necessitating 
time-consuming travel to the other's capital. Further technical 
analysis is required to determine the feasibility of this concept 
from the U.S. perspective .3 If, after further analysis, such a 
concept were Judged to be worthwhile from policy, security, 
technology transfer, and cost perspectives, the United States 
could discuss it with the USSR at the appropriate time. 

PART II ; 

BACKGROUND ; 

Prevention of deliberate or Inadvertent use of a nuclear 
weapon without proper authorization by the President has always 
been a high priority for the federal agencies responsible to the 
President for nuclear weapon command, control, and safety. Since 
the inception of nuclear weapons, a wide range of positive measures 
to control their use has evolved. These positive measures Include 
physical security, procedural control, design safety features, 
and electromechanical control systems. A major challenge in the 
application of positive measures is to "assure authorized use and 
assure against unauthorized use" of a nuclear weapon. Maintaining 
the necessary balance between these requirements Involves detailed 
assessments of each weapon system. The most recent comprehensive 
review of nuclear control procedures and the positive measure to 
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ensure chelr safety was completed in 1986. That study concluded 
that the strengths and capabilities of the current system were 
appropriate, although some potential deficiencies could not be 
completely excluded. Since 1986, however, the international 
security environment has changed, possibly altering this balance 
and suggesting that e review of controls may be appropriate. In 
addition, advanced technology may have overcome the undesirable 
characteristics of older systems for command, control, and safety 
of nuclear weapons. 

( O Installing Post-Launch Destruct Mechanisms on all U.S. 
deployed ICBMs and SLBMs 

A preliminary examination of the Issue of Installation of 
poet launch destruct mechanisms on intercontinental ballistic 
missiles (ICBMs) and submarine launched ballistic missiles (SLBMs) 
has been conducted. Installation of a post launch destruct 
system could provide an additional safeguard against unauthorized 
or accidental launch of a nuclear weapon. However, such a system 
could also Introduce unacceptable vulnerabilities Into the US 
Nuclear Command and Control, System to Include: enemy penetration 
of the safeguards; unintentional or accidental activation of the 
system by the operators; or a system malfunction that could 
disrupt an authorized missile launch. These vulnerabilities may 
seriously affect the ability of the United States to employ these 
strategic systems, which would undermine their deterrent value. 

Post-launch destruct devices provide only one means of 
mitigating the consequences of an unauthorized or Inadvertent 
launch. Another candidate for reducing this risk would be a 
ballistic missile defense system. Indeed, the President has 
directed that the Strategic Defense Initiative program be refocused 
on accomplishing a revised set pf mission objectives for an 
initial U.S. Strategic Defense System. Such a system, known as 
Global Protection Against Limited Strikes (GPALS) will have as 
Its objective the protection of the United States, our forward 
deployed and power projection forces, and our friends and allies, 
from limited ballistic missile attacks, irrespective of their source 
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(U) This section contains additional inforoation of a 
classified nature. The numbered paragraphs correspond to 
footnoted references in the unclassified text. 





A. (U) Installing Permissive Action Links (PALs) on all 
U.S. Nuclear Weapons at Sea. 
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APPENDIX E 


LISTING OF OUTSIDE VIEWS AND STUDIES 


Outside Views 


3 Sep 91 


18 Oct 91 
5 Nov 91 


19 Nov 91 

2 Dec 91 
2 Apr 92 
30 Apr 92 
15 May 92 
2 Jul 92 


Permissive Action Links on SLBMs 
and TLAM(N)s (Woolsey Report) 
Briefing 

Views on Nuclear Failsafe and Risk 
Reduction 

Views on Soviet NC2 

Nuclear Weapons Safety 

Views on Remote Destruct of 
Nuclear Missiles 

Views on Nuclear Failsafe and Risk 
Reduction 

Nuclear Weapons Safety Study 
Views on Post Launch Destruct 
Views on Post Launch Destruct 
Views on Post Launch Destruct 
Views on Failsafe and Risk Reduction 


Amb James Woolsey 

Dr. Richard Brody 

Dr. Bruce Blair 
Dr. John Foster 
Dr. Sherman Frankel 

Dr. A. Wohlstetter 

Dr. Sidney Drell 
Dr. Kosta Tsipis 
Dr. Richard Garwin 
Dr. Sherman Frankel 
Dr. Fred Ikle 


Previous Outside Studies Reviewed 


• President’s Blue Ribbon Task Group on Nuclear Weapons Program 
Management (Clark) Report - July 1985 

• Nuclear Weapons Safety Management Process Review (Moe), 
Februaiy 1990 

• House Armed Services Committee Panel on Nuclear Weapons Safety 
(Drell) Report. December 1990 


S ECRET RESTRieTED DATA - 


Abnormal 

Environments 


Access (Classified 
Information) 


Access (NC2 
Materials) 


Access (Nuclear 
Weapons) 


Access Control 


Accident 


Accident 
Response Group 
(ARC) 

Accountability 


Accreditation 


Active Protection 


CU) Environments in which a weapon system and warhead are 
not expected to retain full operational reliability, but must 
maintain the standards of seifety set forth in the applicable 
requirements documents. Abnormal environments are those 
outside the levels specified for normal environments in the 
stockpile-to-target sequence document. They may occur either 
singly or in credible combinations. 

(U) The ability and opportunity to obtain knowledge of classified 
information. An individual, in fact, may have access to 
classified information by being in a place where such 
information is kept, if the security measures that are in force do 
not prevent him from gaining knowledge of such information. 

(U) The capability and opportunity to handle or control positive 
control material or to obtain prior to an authorized procedure, 
alter, or substitute the internal values of positive control 
material used in the execution and release of nuclear or chemical 
weapons. (See "unauthorized access.") 

(U) Close physical or electrical proximity to a nuclear weapon in 
such a manner as to allow the opportunity to tamper with or 
damage a nuclear weapon. For example, a person would not be 
considered to have access if an escort or a guard were provided 
for either the person or the weapon when the person is in close 
proximity to the weapon. 

(U) Use of procedures and/or physical devices to permit 
authorized access and deny unauthorized access to a nuclear 
weapon. 

(U) Any unplanned occurrence involving loss or destruction of, 
or serious damage to, nuclear weapon systems, nuclear weapons, 
or nuclear components that results in an actual or potential 
threat to national security or to life and property. 

(U) The Department of Energy (DOE) Accident Response Group 
consists of qualified scientific, medical, and technical personnel 
and specialized equipment designated to execute DOE's response 
operations upon notification of a nuclear accident /incident. 

(U) The property that enables activities on an Automated 
Information Systems to be traced to individuals who may then be 
held responsible for their actions. 

(U) A formal declaration by the DAA that the Automated 
Information System is approved to operate in a particular 
security mode using a prescribed set of safeguards. Accreditation 
is the official management authorization for operation of an AIS 
and is based on the certification process as well as other 
management consideration. The accreditation statement affixes 
security responsibility with the Designated Approving Authority 
(DAA) and shows that due care has been taken for security. 

(U) Concept of a use control system that senses attempts to gain 
unauthorized access to weapon components, with option to 
respond with a "penalty" of some sort, e.g., disablement. 
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Active Protection 
System 


Active Protection 
System (APS) 
State 


Adversary 


Adverse Action 


Air Force 
Radiation 
Assessment 
Team (AFRAT) 


Air 

Transportable 
RADIAC Package 
(ATRAP) 


Alarm Center 


Alcohol Abuse 


Alert Area 


Alpha Team 


Ancillary 

Equipment 


(U) A permissive action link (PAL) system that senses and 
responds to unauthorized Intrusions with an appropriate penalty, 
usually weapon disablement. 



(U) An tndivldual(s) who deliberately plans a malevolent act(s) 
involving a nuclear weapon or nuclear explosive device. 


(U) A removal from employment, suspension from employment 
of more than 14 days, reduction in grade, reduction in pay. or 
furlough of 30 days or less. 

(U) A field qualified team of health physicists and health 
physics technicians established at the USAF Occupational and 
Environmental Health Laboratory (USAF OEHL). The team is 
capable of responding worldwide with air transportable 
equipment to radiation accidents/incidents, providing on-site 
health physics consultation and instrumentation for the 
detection, identification, and quantification of any possible 
radiation hazard. 

(U) A collection of RADIAC equipment, spare parts, and tramed 
instrument repair technicians maintained In an alert status by 
the Air Force Materiel Command for airlift to the scene of a 
nuclear weapon accident/incident to supplement the local 
RADIAC equipment and repair capability. 

(U) A specified area, physically located within the boundaries of 
designated areas where nuclear weapons are stored, maintained, 
or on alert, in which the master site intrusion detection alarm, 
perimeter, structure, and facility alarm annunciators are located. 
(See Site Security Control Center.) 

(U) Any irresponsible use of an alcoholic beverage causing 
misconduct or unacceptable social behavior, or impairing work 
performance, physical or mental health, financial responsibility, 
or personal relationships. 

(U) A designated permanent land-based area where delivery 
systems containing nuclear weapons are located and are postured 
for immediate reaction. 

fU) An Army team possessing an alpha radiation monitoring 
capability. The team is IdentS'led usually as part of a Nuclear 
Accident and Incident Control (NAIC) Team 

(U) Items especially constructed or procured for the handling, 
transport, storage, etc., of nuclear weapons or their parts. 
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^peal Board 


Applicant 


Area Commander 
Area Custodian 

Armed 

Arming 

Assessment 

Assurance 
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(U) A panel designated by the General Counsel. DOD, or designee 
to make final determinations in cases which are appealed. 

(U) A person in industry who requires a security clearance for 
access to classified information and any U.S. citizen who is a 
direct-hire employee or selectee for a position with NATO and 
who requires NATO certificates of Security Clearance, security 
assurances for access to U.S. or foreign classified information, or 
Red Cross or USO personnel nominated for assignment with the 
Military Services overseas. The term applicant does not apply to 
those U.S. citizens who are seconded to NATO by U.S. 

Departments and Agencies or to U.S. citizens recruited through 
such agencies in response to a request from NATO. 

tU) A Military Service-designated commander with authority in 
a specific geographical area. 

(U) A COMSEC custodian within a command who receives 
packages of positive control material for follow-on delivery to 
designated using custodians or who. when tasked, places such 
material in storage. 

(U) The configuration of a nuclear weapon in which a single 
signed initiates the action for a nuclear detonation. 

(U) Readjing a nuclear weapon so that a fuzing signal will 
operate the firing system: includes operation or reversal of safing 
items. 

tU) Process by which the National Command Authority is 
provided, with high confidence, information on the nature of the 
event that has occurred (authorized or unauthorized, nuclear or 
conventional, multiple or single events). (Note: This definition 
applies specifically to the Remote Destruct process.) 

tU) A measure of confidence that the security features and 
architecture of an Automated Information System (AIS) 
accurately mediate and enforce the security policy. If the security 
features of an AIS are relied on to protect classified or sensitive 
unclassified information and restrict user access, the features 
must be tested to ensure that the security policy is enforced and 
may not be circumvented during AIS operation. 
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Atomic Energy 

Defense 

Programs 


Audit 


Augmentation 
Force (AF) 

Authentication 


Authentication 

System 

Authenticator 


Authenticator 

Values 

Authorized 

Individual 


Automated 
Information 
Systems (AIS) 


tU) Activities, equipment, and facilities of the Department of 
Defense used or engaged In support of the following: 

• (U) Development, production, testing, sampling, maintenance, 
repair, modification, assembly, utilization, transportation, or 
retirement of nuclear weapons or nuclear weapon components. 

• (U) Production, utilization, or treinsportatlon of DoD SNM for 
military applications. 

• (U) Safeguarding of activities, equipment, or facilities that 
support the functions in definitions above, including the 
protection of nuclear weapons, nuclear weapon components, or 
DoD SNM for military applications at a fixed facility or In 
transit. 


tU) An Independent review and examination of system records 
and activities to test for adequacy of system controls, to ensure 
compliance with established policy and operational procedures, 
and to recommend any Indicated changes In controls, policy, or 
procedures. 

(U) Additional military personnel (or units) trained, equipped, 
and capable of augmenting a security force as required. 

tU) (DoD) A security measure designed to protect a 
communications, system against a fraudulent transmission or 
simulation by establishing the validity of a transmission, 
message, or originator. 

(U) A cryptosystem or a cryptographic process used for 
authentication. 

(U) DoD: A symbol or group of symbols, or a series of bits, 
selected or derived in a prearranged manner and usually inserted 
at a predetermined point within a message or transmission for 
the purpose of attesting to the validity of the message or 
transmission. 


(U) NATO: A letter, numeral, or group of letters or numerals, or 
both, attesting to the authenticity of a message or transmission. 






(U) A person who is properly cleared, trained, and screened for 
the Nuclear or Chemical Weapons Personnel Reliability Program 
In accordance with DoD Directives 5210.42 or 5210.65 and who 
has formal authorization In writing, granted by the PRP 
certifying authority, for access to positive control materlzil used 
In the control of nuclear and chemical weapons. 

(U) An assembly of computer hardware, software, and/or 
firmware configured to collect, create, communicate, compute, 
disseminate, process, store, and/or control data or Information, 
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Automated 
Information 
Systems (AIS) 
Security 


Automated PAL 
Controller 


tU) Measures and controls that safeguard or protect an AIS 
against unauthorized (accidental or intentional) disclosure, 
modification, or destruction of AIS and data, and denial of 
service. AIS security includes consideration of all heirdware 
and/or software functions, characteristics, and/or features: 
operational procedures, accountability procedures, and access 
controls at the central computer facility, remote computer, and 
terminal facilities: management constraints: physical structures 
and devices: and personnel and communication controls needed 
to provide an acceptable level of risk for the AIS and for the data 
and information contained in the AIS. It Includes the totality of 
security safeguards needed to provide em acceptable protection 
level for an AIS and for data handled by AIS. 

(U) A programmable microprocessor used for PAL recode, code 
check, lock, unlock, and APS operations in support of PAL 
devices. 


Back Door 


Background 

Count 


Background 
Investigation (BI) 


Background 

Radiation 


Barrier 


BENT SPEAR 
(Nuclear Weapon 
Incident) 


BROKEN ARROW 
(Nuclear Weapon 
Accident) 

Bulk Reserve 


(U) A hidden means of accessing software /firmware that permits 
the program originator/other person to gciin access to the 
program without doing so through the normal means. Also see 
Trap Door and Trojan Horse. 

(U) (In connection with health protection). The background 
count Includes radiation produced by naturally occurring 
radioactivity and cosmic rays. 

(U) A personnel security investigation consisting of both record 
reviews and interviews with sources of Information as prescribed 
in paragraph 3, Appendix B, this Regulation, covering the most 
recent 5 years of an individual's life or since the 18th birthday, 
whichever is shorter, provided that at least the last 2 years are 
covered and that no investigation will be conducted prior to an 
individual's 16th birthday. 

tU) Radiation arising from radioactive material other than the 
one under consideration. Background radiation due to cosmic 
rays and natural radioactivity is always present. 

(U) A coordinated series of obstacles designed or employed to 
canalize, direct, restrict, delay, or stop the movement of an 
intruding force. 

(U) A CJCS term used in the DoD to identify and report a nuclear 
incident involving a nuclear weapon/warhead, nuclear 
components or vehicle when nuclear loaded. In the Army and 
Air Force, this term includes a "significant Incident" as defined 
in DoD Directive 5100.52. See nuclear weapon incident. 

(U) A CJCS term to identify and report an accident involving a 
nuclear weapon/ warhead or nuclear component. See nuclear 
weapon(s) accident. 

(U) Material not designated EFFECTIVE or RESERVE. 


Bypass 


(U) Circumvention of a PAL or disablement system: does not 
include obtaining unauthorized access to control codes. 
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Cancellation 

Category 


Certification 


Certification 


Certifying 

Official 


Classified 

Information 


Classified 
Logistic 
Shipment Code 


Classified 

National 

Security 

Information 


Code Activated 
Processor 

Code Identifier 


Coded Control 
Device (CCD) 


(U) Withdrawing a nuclear control order not yet acted upon. 

(U) A grouping of classified or sensitive unclassified information 
to which an additional restrictive label is applied for signifying 
that personnel are grated access to the information only if they 
have formal access approval or other applicable authorization 
(e.g., proprietary information, for official use only, 
compartmented Information). 

(U) A determination by the applicable Service that a unit is 
capable of performing its assigned nuclear mission. Army 
accomplishes this by Nuclear Surety Inspection; Navy by Nuclear 
Weapons Acceptance Inspection: and Air Force by Nuclear Surety 
Inspection. 

(U) The technical evaluation of an Automated Information 
Systems security features and other safeguards, made in support 
of the accreditation process, which established the extent that a 
particular Automated Information Systems design and 
implementation meet a set of specified security requirements. 

tU) For military and DoD civilian personnel, the commander, or 
designee, responsible for the operation or security, or both, of 
nuclear weapons. In a PRP position allowing sufficient personal 
contact with all personnel to permit continual evaluation. For 
DoD contractor personnel, the DoD official designated in the 
contract. 

(U) Official Information or material that requires protection in 
the Interests of national security and that is classified for such 
purpose by appropriate classifying authority in accordance with 
the provisions of Executive Order 12356 (reference ())). 

(U) A split-knowledge S-FRD code placed in the PAL of a nuclear 
weapon during shipment. Classified logistic codes are obtained 
from NSA-produced numerical master lists, or memory phrases, 
PROMs. SDMs. and PDMs for recode operations. Such codes are 
controlled by DNA with special guidance published in TP 50-2. 

(U) Information or material subject to the control of the US 
Government encompassing both US national defense and foreign 
relations that has been determined pursuant to Ebcecutive Order 
12356 (reference (c)) to require protection against unauthorized 
disclosure, and that is so designated. 

(U) A microprocessor-based coded PAL device with the capability 
of either plain text or encrypted code operations. 

(U) An unclassified alphanumeric sequence, consisting of two 
letters and three digits, corresponding to the PAL code. 

(U) A device, subsystem, or system included in or attached to a 
warhead, weapon, or weapon system to preclude or delay arming, 
launching, release, or nuclear detonation until after insertion of 
a discrete code or combination. 
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Coded Switch 
Management 
Team 


Coded Switch 
Masters (Part A 
and Part B) 


Coded Switch 
System 


Coded Use 
Control 


Coding 

Equipment 


Cogidzant Agent 


Cognizant 
Federal Agency 
(CFA) 


Comihand 

Approving 

Authority 


(U) A team composed of four HQ STRATCOM custodian 
personnel who are responsible for management of coded-switch 
operation. The team will be divided into A and B sections, with a 
minimum of two persons (E-7 or above) in each section. 



(U) A command and control concept in which the discrete code or 
combination required to operate a coded control device is held at 
an echelon above the delivery unit until after nuclear release or 
unlock has been directed by competent authority. 

(U) All equipment and related peripheral equipment (i.e., cable, 
coimectors, power supplies, etc.) whose main purpose is to 
process, transfer, temporarily store, or verify operational code 
values in nuclear weapons. Two classes of this equipment are 
recoders and decoders. 

(U) A person who, by reason of official duties, has been 
authorized access to nuclear command and control 
communications or would have the opportunity, by any means, 
to gain access to nuclear command and control communications 
security material. 

(U) The Cognizant Federal Agency is that Federal agency having 
custody of the weapon at the time of the accident. The CFA is 
responsible to: 

• (U) Conduct and mangge Federal on-site actions. 

• (U) Develop or evaluate recommendations for public protective 
action measures off site. 

• (U) Present recommendations- for off-site protective action 
measures, in accordance with FEMA, to the appropriate State 
and/or local officials of Foreign government. 

• (U) Coordinate initially the release of information to the 
public. Congress, and the White House until transferred to FEMA 
by mutual agreement. 

(U) The unified, specified, theater, or Service component major 
command responsible for determining and coordinating the 
requirements of subordinate forces to hold two-person material 
controlled by another authority or command. The command 
approving authority approves all two-person control systems 
used, possessed, or controlled by forces within a command. 
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Command 
Unlock Values 


Communicate 


Communications 

Security 

(COMSEC) 


Community 
Emergency 
Action Team 
(CEAT) 

Competent 

Medical 

Authority 


Component 

Commands 


Compromise 


Compromise 


Computer 


Computer 



(U) The ability to alert higher authority that an event has 
occurred, facilitate assessment of that event, transmit a decision 
to destroy or not destroy, sind provide verification of destruction. 
(Note: This definition applies specifically to the Remote Destruct 
process.) 

(U) Measures taken to deny unauthorized persons Information 
derived from telecommunications of the United States 
Government concerning national security and to ensure the 
authenticity of such telecommunications. Note: 

Communications security Includes crypto-security, transmission 
security, emission security, and physical security of COMSEC 
material and COMSEC liiformatlon. 

(U) A team of response and local experts that operates out of the 
Joint Information Center (JIC) and Is available to assist the local 
community. 


(U) A US military medical officer or a US civilian physician 
employed by the the US Government, responsible for providing 
medial services or clinical evaluations as specified by the 
Certifying Official and. when appropriate, the Reviewing Officials 

(U) The component commander and all individuals, units, 
detachments, organizations, or installations under his 
operational command that have been assigned to the operational 
command of the commander of a unified or combined command. 



(U) A violation of the security system such that ah unauthorized 
disclosure of sensitive information has occurred. 

(U) A machine capable of accepting, performing calculations on. 
or otherwise manipulating or storing data. It usually consists of 
arithmetic and logical units and a control unit, and may have 
Input and output devices and storage devices. 

(U) Code: Frequently a synonym for a computer program: also 
part of a program. 

(U) Program: A compilation of coded Instructions for 
performing a sequence of tasks on a computer. 

(U) Subprogram: Part of a computer program: usually the 
calculation of one aspect of a more complex routine. 
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Connguration 

Control 


Confirm 

Destruction 


Container 

Contamination 


Contamination 

Control 


Contamination 
Control Line 
(CCL) 


Contamination 
Control Station 


(CCS) 


Contemporary 
Risk Reduction 
Measures 


Contingency PAL 
System 


(U) Management of changes made to a system’s hardware, 
software, firmware, documentation, and/or facilities throughout 
the development and operational life of the system. For FARR 
purposes, configuration control Is not concerned with the 
development plans. 

(U) Provide a distinct signature that a destruction mechanism 
has functioned that can be verified by both the US and other 
parties. (Note: This definition applies specifically to the Remote 
Destruct process.) 

(U) A box or enclosure capable of containing radiation. 

(U) The deposit and/or absorption of radioactive materlad, 
biological, or chemical agents or hazardous materials on, and by, 
structures, areas, personnel, or objects. 

(U) Procedures to avoid, reduce, remove, or render harmless, 
temporarily or permanently, nuclear, biological, chemical agents 
and hazardous materials contamination. 

(U) A control line surrounding the radiological control area. 
Initially, the contamination control line extends 100 meters 
beyond the known/ suspected radiological contamination to 
provide a measure of s^ety. Once the contamination control 
station is operational, this line is the outer boundary that 
separates the reduced hazard area from the clean area. 

(U) An area (tent or facility) specifically designated for 
controlling Ingress and egress of personnel and equipment 
to/from the radiation control area. The outer boundary of the 
Contamination Control Station is the contamination control 
line, and the Irmer boundary is the line segment labeled the hot 
line. 

(U) General categories of activities that are currently used a 
confidence building measures between potential adversaries: 
communications, consultations, "rules of the road" for military 
activities, and predictability measures. 
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Controlled 

Position 


Controlling 

Authority 


Counterintelli- 

gence 


CU) A position whose incumbent, because of assigned nuclear 
duties: 

(U) Has access but not technical knowledge, as defined herein; or 

tU) Controls entry into an Elxclusion Area (see definition) but 
does not have access or technical knowledge, as defined herein; 
or 

(U) Is armed, assigned duties relating to nuclear security, and In 
a direct line of sight to a nuclear weapon and could Inflict 
damage upon the weapon or, when joined, to Its delivery system, 
or 


(U) Has been designated as a Certifying Olllcial at operational 
unit level or first level Certifying Official in staff activities with 
Identified PRP positions at the Controlled level only. 



(U) Information gathered and activities conducted to protect 
against espionage and other clandestine intelligence activities, 
sabotage, international terrorist activities, or assassinations 
conducted for or on behalf of foreign powers, organizations, or 
persons. 


Coimtermeasures 


Critical 

Commimioations 

Facility 


Critical 

Equipment 


Critical 

Facilities 


tU) Actions taken to defeat or degrade performance of a nuclear 
weapon on its way to the target. In the SAF&F context, concern 
is normally with electrical or electronic countermeasures or 
jamming. 

(U) A communications facility that is essential to the continuity 
of operations of the National Command Authority (NCA) during 
national emergencies, and other nodal points or elements 
designated as crucial to mission accomplishment. 

(U) Specifically designated equipment, including software, used 
to build, encode, decode, transmit, or receive emergency action 
messages: that identify nuclear targets, select nuclear weapons to 
be used against specific targets, and route nuclear-weapons- 
carrylng platforms to appropriate launch points; support or 
inhibit delivery, arming, fuzing, and firing of the nuclear 
weapons themselves: positive control material and devices: and 
nuclear weapons hardware. 

(U) Specifically designated facilities provided for principal NC2 
decision-makers, and key personnel and/or functions in the 
chain of command, from which, by acting in concert, all 
essential NC2 functions can be performed expeditiously 
throughout all phases of nuclear conflict. 
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CriUcal NC2 
Component 


Critical Nuclear 
Weapon Design 
Information 
(CNWDI) 


Criticai Position 


Cross-Reference 

Sheets 


Cryptographic 

Information 


(U) A network, facility, system, node, or services that are of such 
Importance that total loss, disruption, or severe damage could 
result In loss of function or unacceptable Impairment of; 
integrated tactical warning and attack assessment system 
(mdudmg emergency conferencing): high-level decision 
dlssemmating means (mdudmg terrestrial, radio frequency or 
satellite means); SI OP force tracking (mdudmg world-wide 
Military Command & Control System (WWMCCS) amd Nuclear 
Plannmg and Ebcecution System (NPES)): and nuclear weapon 
components, nuclear weapons, and nuclear weapon systems, 
mdudmg associated control, control equipment amd materials, 
facilities, and transportation means. 

(U) TOP SECRET RESTRICTED DATA or SECRET RESTRICTED 
DATA revealmg the theory of operation or design of the 
components of a thermonuclear or implosion-type fission bomb, 
wairhead, demolition mumtion, or test device. Specifically 
excluded is information concemmg armmg. fuzmg, and firing 
systems, limited life components, and totally contamed 
quantities of fissionable, fussionable, and high explosive 
materials by type. Among excluded Items are the components 
which Service personnel set. rnamtam, operate, test, or replace. 

(U) A position whose mcumbent, because of assigned nuclear 
duties: 

• (U) Has access'and technical knowledge as defined herem: or 

• (U) Can. at battalion, squadron, ship level, or below, either 
directly or mdlrectly cause the launch or use of a nuclear 
weapon: or 

• (U) Controls or uses sealed authenticators, permissive action 
link (PAL) materials, related codes, strategic missile computer 
tapes, emergency action messages, or release procedures for 
nuclear weapons: or 

• (U) Has been designated as a Certifying Official at operational 
umt level or first level Certifying Official in staff activities with 
identified Critical PRP positions. 

(U) A prmted product relatmg the short titles of encrypted 
combinations contamed on a specific APC PROM to the 
identlfymg data needed to retrieve those combmations. 

(U) All mformation significantly descriptive of cryptographic 
techniques and processes or of cryptographic systems and 
equipment, or their functions and capabilities, and all 
cryptomaterial. ("Significantly descriptive" means that the 
information could, if made known to unauthorized persons, 
permit recovery of specific cryptographic features of classified 
crypto-equipment, reveal weaknesses of associated equipment 
that would allow recovery of plam text or of key, aid materially 
in the cryptoanalysis of a general or specific cryptosystem, or 
lead to the cryptoanalysis of an individual message, command, 
or authentication.) 
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Custodial 

Detachment 
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Data 

Data Integrity 

Data Transport 
Device (DTD) 

Debris 

Decoder 

Decontamination 
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(U) The total dose resulting from repeated exposure to radiation 
in the same region, or of the whole body. 

(U) A commander responsible for maintaining custody, 
guardianship, and safekeeping of nuclear weapons and their 
components and of source and special nuclear materials. 

(U) A United States (US) unit which maintains custody of nuclear 
weapons for use by a non-US delivery unit and acts in support of 
that unit. A custodial detachment may also maintain 
accountability for nuclear weapons in its custody. 

(U) Those structures or rooms utilized by on-duty US personnel 
responsible for the custody of nuckcir weapons. 

(U) A US forces unit responsible for the control of, transfer and 
movement of, and access to, nuclear and chemical weapons and 
components, 

(U) He who has: 

• (U) Responsibility for the control of, transfer and movement 
of, and access to nuclear weapons and nuclear components; 

• (U) Responsibility for the control, certification, modification, 
and/or application of a trusted computing base of related codes: 

• (U) Responsibility for certification, movement, repair, and/or 
modification of NC2 systems/facilities. 

(U) The responsibility for the control of, transfer and movement 
of, and access to nuclear weapons and nuclear components. 

(U) A representation of facts, concepts, information, or 
Instructions suitable for communication, interpretation, or 
processing by humans or by an Automated Information Systems. 


(U) The state that exists when data is unchanged from its source 
and accidentally or maliciously has not been modified, altered, 
or destroyed. 



(U) Residue from detonation of a weapon, plus radioactive 
materials from its environment. 

(U) A type of controller; e.g., the T1535 decoder, which is capable 
of generating the appropriate coded switch message to cause 
unlocking or locking, and for Active Protective System state 
control. 

(U) The process of making any person, object, or area safe by 
absorbing, destroying, neutralizing, making harmless, or 
removing hazardous materials clinging to or around it. 
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Decontamination 

Station 


Dedicated 
Security Mode 


Defeat / 
Circumvention 


Defense Courier 
Service Couriers 


Defense Nuclear 
Agency (DNA) 
Surveillance 
Inspections 
Deficiency 


Delay 


Deliberate 
Unauthorized 
Launch Analysis 

Delivery Unit 


Delivery Vehicle 


Denial of Service 


Deplo}mient 


(U) A building or location equipped and organized to cleanse 
personnel and material of chemical, biological, or radiological 
contaminants. 

(U) A mode of operation wherein all users have the clearance or 
authorization and need-to-know for all data handled by the 
Automated Information Systems. If the Automated Iriformation 
Systems processes special access information, eill users require 
formal access approval. In the dedicated mode, an Automated 
Information Systems may handle a single classification level 
and/or category of information or a range of classification levels 
and/or categories. 

(U) Actions taken overtly or covertly to overcome the (1) use 
control system of a nuclear weapon or weapon system. (2) 
processing of NC2-critical information, or (3) physical security of 
an NC2 system/facility. 

(U) TOP SECRET-cleared personnel of the US Armed Forces 
assigned to a courier station to perform DCS duties and identified 
by possession of a DCS identification card. 

(U) DNA inspections which consist of the observation and 
evaluation of Service inspection teams while they are performing 
the NWn portion of Service inspections. 

(U) A variance from procedures or criteria prescribed in 
pertinent technical publications or other Service publications 
which directly Implement DoD requirements. 

tU) The effect achieved by physical features, technical devices, or 
security measures and forces that Impedes an adversary from 
gaining access to a nuclear weapon. Normally expressed as a 
function of time, it is a major consideration in the design and 
development of nuclear weapon security systems. 

(U) See Unauthorized Use Analysis (UUA). 


tu) A unit with the weapon system, command and control, 
logistics, and security to cause a weapon to be fired or launched 
at a target. 

(U) The portion of a weapon system that delivers a nuclear 
weapon to its target; usually a missile or aircraft. 

Action or actions that result in the Inability of an Automated 
Information Systems or any essential part to perform its 
designated mission, either by loss or degradation of operational 
capability. 

tU) Moving nuclear or chemical weapons, or nuclear- or 
chemical-equipped delivery systems to designated areas In order 
to achieve a better posture. 
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Depot Storage 
Code 


Designated 
Approving 
Authority (DAA) 


Designated 

Couriers 


Designated 
Nuclear 
Command and 
Control 
Personnel 


Destroy 

Destruction 


Detection 


Detonation 


Detonator 


(U) A split-knowledge classified code placed in the PAL of a 
nuclear weapon during temporary storage where operational 
codes are not required. Depot codes are either (1) locally 
developed numerical codes or combinations. (2) obtained from 
NSA-produced numerical master lists, or (3) memory phrases 
used with NSA-provided PROMS. SDMs. or PDMs. Depot storage 
codes are controlled by DNA. 

(U) The official who has the authority to decide on accepting the 
security safeguards prescribed for an Automated Information 
Systems or the official who may be responsible for issuing an 
accreditation statement that records the decision to accept those 
safeguards. The DAA must be at an organizational level, have 
authority to evaluate the overall mission requirements of the 
Automated Information Systems, and to provide definitive 
directions to Automated Information Systems developers or 
owners relative to the risk in the security posture of the 
Automated Information Systems. 

(U) Properly cleared and briefed commissioned, warrant, and 
noncommissioned officers of the US Armed Forces in travel 
status who are designated by DCS personnel acting for the 
Commander. DCS. to act as couriers to deliver classified material 
between a DCS station and an addressee or another DCS station. 

(U) These include, but are not necessarily limited to, those 
personnel with access to the NC2 coding and authentication 
processes and a communications medium necessary to transmit 
release, execution, or termination orders; those personnel 
involved in the preparation and production of NC2 coding and 
authentication documents and equipment, those personnel 
Involved in preparation and production of nuclear weapons 
targeting tapes and materials; and those maintenance and 
security personnel who could have adverse impact on system 
performance for nodes and equipment that represent near-single- 
point-failure elements for the NC2 system. 

(U) See Remote Destruct. 

(U) Physically destroying SAS, PAL. CSS, or PES material. 
Violent destruction (l.e., one-point detonation of the weapon’s 
high explosive) of nuclear weapons and/or nuclear components to 
render the weapon useless. 

tU) Process that determines that the launch or release of a 
nuclear-capable system or a nuclear-armed weapon has occurred. 
(Note: This definition applies specifically to the Remote Destruct 
process.) 

(U) A stable explosive process characterized by the existence of a 
shock- initiated chemical reaction that, in turn, supplies the 
energy to support the shock. 

(U) In this guide, an electroexplosive device designed to produce a 
detonation in response to an applied electric current. 
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Dlal-A-Tield 

(DAY) 



Disablement 

Dlsassoclatlon 

Disaster Control 

Disaster Control 
Officer (DCO) . 

Disaster Cordon 

Disaster 

Preparedness 


Disaster 
Response Force 
(DRF) 

Dispersal 


Dispersal Site 


DoD Component 


DoD Personnel 


Dose Rate 
Contour Line 


(U) An action, such as damaging a component, that prevents a 
nuclear weapon from achieving a significant yield unless it is 
renovated. 

(U) The act of rendering a nuclear weapon Incapable of achieving 
a nuclear yield by removing critical components for storage 
elsewhere. The act is reversible. 

(U) Measures taken before, during, or after hostile action, 
natural or man-made disasters, to reduce the probability of 
damage, minimize its effects, and initiate recovery. 

(U) The DCO is the DoD point of contact with FEMA at the 
disaster scene for providing DoD support to disaster recoveiy 
operations. 

(U) A physical barrier surrounding the accident scene where 
control is established to preclude unauthorized entry. 

(U) That series of actions to control and manage nuclear 
Incidents and bring them to a practicable conclusion within the 
established security, response, and recovery framework. These 
actions Include irhtlal and subsequent reporting response. 
Explosive Ordnance Disposal procedural action on the weapon(s), 
appropriate security, legal and medical aspects, public 
information, and control of hazards caused by the accident. 
Control of the accident caused hazards Include: survey of the 
incident/ accident area to establish isodose lines and all types of 
monitoring; personnel and area decontamination; disposition of 
nuclear, high explosive, and contamination items. 


(U) The USAF base level organization which responds to 
disasters/accidents, responsible for establishing command and 
control, and to support disaster operations. 



(U) An area or installation used by forces during periods of alert, 
mobilization, or armed conflict to diminish vulnerability of 
units to detection and attack. 

(U) Includes the Office of the Secretary of Defense; the Military 
Departments. Organization of the Joint Chiefs of Staff; Directors 
of Defense Agencies and the Unified and Specified Coriimands. 

(U) Active duty military personnel, active civil service employees 
of the Department of Defense, or DoD contractors and their 
employees. 

(U) A line on a map, diagram, or overlay Joining all points at 
which the radiation dose rate at a given time is the same. 
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Drug Abuse 


DT 

Duress System 


Edition 


Effective Edition 


Effects 


Electromagnetic 
Pulse (EMP) 

Electronic 
Security Systems 
(ESS) 


Emergency 


Emergency 

Destruction 


Emergency 
Security Forces 

Entrance 
Nationai Agency 
Check (ENTNAC) 


(U) The Illegal, wrongful, or improper use of any narcotic 
substance, cannabis, or other controlled substance or the illegal 
or wrongful possession, transfer, or sale of same. 

(U) Deuterium, tritium, or a mixture of the two. 

(U) A method by which personnel authorized entry Into 
Exclusion Areas, and those who authorize entry Into, or escort 
visitors into Limited or Exclusion Areas, can covertly 
communicate a situation of duress to a security control center or 
other operating or security persoimel who will notify a security 
control center. 



(U) An edition of sealed authenticators, PAL, CSS, or PES 
material that a controlling authority has designated to be used In 
authentication of nuclear or chemical control orders or unlock of 
nuclear weapon systems, 

(U) All phenomena resulting from the energy outputs of a nuclear 
explosion. 

(U) A strong pulse of electromagnetic radiation (EMR), with a rise 
time of about 10*® second, resulting from a nuclear explosion. 

(U) That part of physical security concerned with the 
safeguarding of personnel and property by use of electronic 
systems. These systems include, but are not limited to. intrusion 
detections systems (IDS), automated entry control systems 
(AECS), and video assessment systems, 

(U) An unexpected occurrence or set of unexpected circumstances 
in which personnel or equipment unavailability, due to accident, 
natural event, or combat, may demand immediate action that 
may require extraordinary measures to protect, handle, service, 
transport, or employ a nuclear weapon. 

(U) The destruction of nuclear munitions, components, and 
associated classified material, without significant nuclear yield, 
to render a weapon tactlczilly useless. 

(U) Those designated reinforcing security personnel to Include all 
response forces. 

(U) A personnel security investigation scoped and conducted in 
the same manner as a National Agency Check except that a 
technical fingerprint search of the files of the Federal Bureau of 
Investigation Is not conducted. 
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Escalation 

Control 


Evaluated 
Products list 
(EPL) 

Evaluation 

Authority 

Exception 


Exclusion Area 


Exercise SAS, 
PAL. CSS, or PES 


Explosive 

Ordnance 


(U) The concept of limiting the level, scope, or intensity of a 
conflict to reduce the probability of a massive USSR response. 
The objective of escalation control is prompt war termination at 
the lowest level of conflict possible on terms favorable to the 
Unites States. 

tU) A documented inventory of equipments, hardware, software, 
and/or firmware that have been evaluated against the evaluation 
criteria found in DoDD 5200.28-STD. 

(U) The controlling authority or the NSA. as applicable, who has 
responsibility for evaluating possible compromises. 

(U) An approved permanent deviation from the provisions of 
this manual (DoDD 52 10.4 IM. Sep 87) that creates a security 
vulnerability. 

(U) A designated area Immediately surrounding one or more 
nuclear weapons/systems. Normally, the boundaries of the area 
are the walls, floors, and ceiling of a structure or are delineated 
by a permanent or temporary barrier. In the absence of positive 
preventative measures, access to the Ebcclusion Area constitutes 
access to the nuclear weapon(s)/ systems. 

(U) A system, bearing the short title USCXS-, that parallels its 
operational counterpart and is used in exercises as directed by 
the controlling authority. 

(U) All munitions containing explosives, nuclear fission, or 
fusion materials and biological and chemical agents. This 
ordnance Includes bombs and warheads, guided and ballistic 
missiles: artillery, mortar, rocket, and small arms ammunition. 
Also, ordnance includes all mines, torpedoes, and depth charges: 
pyrotechnics: clusters and dispensers: cartridges and propellant 
actuated devices: electro-explosive devices: clandestine and 
Improvised explosive devices: and all similar or related items or 
components explosive in nature. 


Explosive 
Ordnance 
Disposal (EOD) 


Explosive 
Ordnance 
Disposal Incident 


(U) The detection, identification, field evaluation, rendering-safe, 
and/or disposal of explosive ordnance which has become 
hazardous by damage or deterioration when the disposal of such 
explosive ordnance is beyond the capabilities of personnel 
assigned to routine disposal. 

(U) The suspected or detected presence of unexploded ordnance, or 
damaged explosive ordnance, which constitutes a heizard to 
operations, installation, personnel, or material. Not Included in 
this definition are the accidental arming or other conditions that 
develop during the manufacture of high explosive material, 
technical service assembly operations, or the laying of mines and 
demolition charges. 
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(U) Those particular courses or modes of action for access to, 
recover, rendering-safe, and final disposal of explosive ordnance 
or any hazardous material associated with an explosive ordnance 
disposal incident. 

tU) Access Procedures, Those actions to locate exactly and to 
gain access to unexploded ordnance. 

(U) Recovery Procedures. Those actions to recover unexploded 
ordnance. 

tU) Render Safe Procedures. The portion of the explosive 
ordnance disposal procedures involving the application of special 
explosive ordnance disposal methods and told to provide the 
interruption of functions or separation of essential components 
of unexploded ordnance to prevent an unacceptable detonation. 

tU) Final Disposal Procedures. The final disposal of explosive 
ordnance by explosive ordnance disposal personnel, which may 
Include demolition or burning in place, removal to a disposal 
area., or other appropriate means. 

(U) Personnel with special training and equipment who render 
explosive ordnance (such as bombs, mines, projectiles, and booby 
traps) safe, make intelligence reports on such ordnance, and 
supervise the safe removal thereof. 

(U) Reconnaissance involving the investigation, detection, 
location, marking, initial identification, and reporting of 
suspected unexploded ordnance, by explosive ordnance 
reconnaissance agents, to determine further action. 

(U) The exposure at a given point is a measurement of radiation 
in relation to its ability to produce ionization. 

tU) A physical plant, such as real estate and Improvements 
thereto, including buildings and equipment. 

(U) Feature of a system or device which automatically activates 
an alarm in the event a component part of the system is removed 
or when a component part or portion of the circuit malfunctions 
or loses power. Restoration to normal operation is not possible 
until the fault is corrected. 

(U) That combination of safety, security, and control procedures 
and equipment intended to prevent mistaken authorized use, 
unauthorized use. Inadvertent use. or loss of nuclear weapons or 
to interrupt, terminate or mitigate the results of such action 
should one occur. These are unilateral actions that need 
not/should not be communicated to others to be effective. 

(U) An alarm without a known cause. 

(U) The Federal official appointed by the President upon 
declaration of a major disaster or emergency under Public Law 
93-288 to coordinate the overall Federal response. 
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(U) This agency establishes Federal policies for and coordinates 
all civil defense cind civil emergency planning, management, 
mitigation, and assistance functions of executive agencies. 

FEMA assists local and state agencies in their emergency 
planning. Its primary role in a nuclear weapon accident is one of 
coordinating Federal, state, local, and volunteer response 
actions. 

(U) Emergency Information and Coordination Center (EICC): The 
EICC is located in FEMA Headquarters in Washington. D.C. and 
provides overall direction, control and coordination of Federal 
and state emergency services response /recovery to a radiological 
accident or emergency. 

(U) Emergency Response Team (ERT): The FEMA team deployed 
to a radiological emergency scene by the FEMA Director to make 
an initial assessment of the situation and then provide FEMA's 
primary response capability. 

fU) Emergency Support Team (EST): The FEMA Headquarters 
Team that carries out notification activation and coordination 
procedures from the FEMA EICC. The EST is responsible for 
Federal agency headquarters coordination, staff support of the 
FEMA Director, and support of the SFO, 

(U) The Federal plan to assist State and local government 
officials or other Federal agencies in the response to a 
radiological emergency in the US. its possessions and territories. 


(U) A center established near the scene of a radiological 
emergency responsible for off-site radiological response from 
which the FRMAC Director conducts FRMAP response. This 
center need not be located near the on-site or Federal-State 
operations centers as long as its operations can be coordinated 
with them. Staffed by DOE NV. 

(U) A plan to provide coordinated radiological monitoring and 
assessment assistance to the State and local governments in 
response to radiological emergencies. This plan, authorized by 
44 CFR Part 351, supersedes the Interagency Radiological 
Assistance Plan. 

(U) The on-site focal point established by the Senior FEMA 
Official (SFO). as required, for coordinating the Federal response 
to a nuclear weapon accident or significant incident. 
Representatives of other Federal, state, local, and volunteer 
agencies will be located in the center. 
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(U) Provision, normally by a .firing set, of the proper electrical 
energy to fire a nuclear assembly's detonator system. 


(U) A heavy isotope capable of undergoing fission by neutrons of 
any energy: isotopes such as and ^^’Pu. 

tU) A heavy Isotope capable of undergoing fission by some 
process: in a weapon context, materials such as 238u that have a 
fission threshold above 1 MeV for neutrons. 

(U) Information relating to the capabilities, intentions, and 
activities of foreign powers, organizations, or persons. 

(U) Documented approval by a data owner to allow access to a 
particular category of information. 

tU) Designation in writing by an appropriate PRP certifying 
authority or agency for access to handle SAS or PAL. CSS, or 
PES material. 

(U) Information removed from the Restricted Data category upon 
determination jointly by the Department of Energy and 
Department of Defense that such information relates primarily 
to the military utilization of atomic weapons and that such 
information can be safeguarded adequately as national security 
information (Section 142d. Atomic Energy Act of 1954. as 
amended). 

(U) Generating a signal that. In an armed nuclear weapon, will 
operate the firing system, 

(U) The term "handled by" denotes the activities performed on 
data in an Automated Information Systems, such as collecting, 
processing, transferring, storing, retrieving, sorting, 
transmitting, disseminating, and controlling, 

(U) That phase of weapon logistics wherein weapons are 
physically manipulated directly or Indirectly by people. 
(Characterized as lifting, sliding, hoisting, lowering, or moving 
an item on dollies or pallets over short distances through the use 
of manpower, tugs, cranes, forklifts, and hoists.) 

(U) Measures taken In the design and fabrication of a weapon or 
Its parts to reduce their vulnerability. 
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(U) The degree of resistance of a weapon or its components to 
adverse environments, particularly the effects of a defensive 
nuclear burst. 

(U) Any material that is flammable, corrosive, an oxidizing 
agent, explosive, toxic, poisonous, etiological, radioactive, 
nuclear, unduly magnetic, a chemical agent, biological research 
material, compressed gases, or any other material that, because 
of its quantity, properties, or packaging, may endanger human 
life or property. 

(U) Hazardous electromagnetic radiation to which a weapon 
system containing an electroexplosive device might by subjected 
and emanates from a source which is not an integral part of the 
weapon system. 

(U) The Secretary of Defense: the Secretaries of the Military 
Departments: the Chairman of the Joint Chiefs of Staff: and the 
Commanders of Unified and Specified Commands: and the 
Directors of Defense Agencies. 

(U) See Joint Pub. 1-02. 


(U) Effects of nuclear explosions that occur above 250,000 feet. 


(U) The region in a contaminated area in which the level of 
radioactive contamination is considerably greater than in 
neighboring regions in the area. "HOT SPOT' also refers to the 
DOE Accident Mobile Counting Laboratory and Mobile Support 
Equipment. 

(U) A system that commences with circuits carrying electrical 
energy from the firing set and terminates with the units that 
detonate the main HE charge, including HE. air. or ring lenses. 

(U) Is an event resulting from a deliberate act. involving nuclear 
weapons or nuclear materials which include the sabotage, 
seizure, theft, or loss of a nuclear weapon or radiological nuclear 
weapon component or the fabrication and employment of an IND 
or a credible threat of either, 

(U) An individual or series of technical malfunctions, acts of 
God, or human errors, or combinations thereof, that result in an 
unplanned and unauthorized launch, release, firing, detonation, 
or jettison of a nuclear weapon. 

(U) Methodology for analyzing technical malfunctions, acts of 
God, and human errors that could result in an inadvertent use of 
a nuclear weapon. Usually based on a fault tree analysis or 
probabilistic risk analysis approach. May or may not be 
quantitative. Identifies what can go wrong, how likely is it to 
occur, and what will be the probable outcome. 
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Incident 

tU) An unexpected event involving a nuclear weapon system, a 
nuclear weapon, or a nuclear component resulting in any of the 
following, but not constituting an accident: 


• (U) An increase in the possibility of an explosion or 
radioactive contamination. 


• (U) Errors committed in the assembly, testing, loading, or 
transportation of equipment, or the malfunctioning of 
equipment and material that could lead to an unintentional 
operation of the weapon arming and firing sequence. 


• (U) Dsimage to the nuclear weapon or the nuclear component 
due to any natural occurrence, unfavorable environment, or 
other condition. 

Independent 

Assessment 

(U) An analysis of hardware, system, software, or firmware done 
by persons or organizations other than those who either (1) 
designed it. (2) are responsible for Its day-to-day functioning, or 
(3) sponsor the effort that normally assesses it. 

Independent 
Power Source 

tU) A power source, normally battery, independent of any other 
source. 

Indoctrinated 

fU) Persotmel clezired for Confidential access and briefed 
regarding the continuous handling and/or observation and 
recovery procedures specific to VCP. 

Information 

(U) Knowledge such as facts, data, or opinions. Including 
numerical, graphic, or narrative forms, whether oral or 
maintained in any medium. 

Information 
System Security 
Officer asSO) 

fU) The person responsible to the DAA for ensuring the security 
is provided for and Implemented throughout the life cycle of an 
Automated Information Systems from the beginning of the 
concept development phase through its design, development, 
operation, maintenance, and secure disposal. 

Information 

Systems 

(U) The organized collection, processing, transmission, and 
dissemination of information in accordance with defined 
procedures, whether automated or manual. 

Initial Response 
Force (£RF) 

(U) An element, whose capabilities are listed in the Nuclear 
Accident Response Capabilities Listing (NARCL); belonging to 
DoD or DOE Installations, facilities, or activities, which would 
take emergency response actions necessary to maintain 
command and control on-site pending arrival of the Service or 
agency response force. Functions which the initial response 
force is tasked to perform (within its capabilities), are: 


• Rescue operations 

• Accident site security 

• Firefighting 

• Initiation of appropriate EOD procedures 

• Radiation monitoring 

• Establishment of command, control, and communications 

• Public affairs activities 
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Insensitive High 
Explosive (IHE) 


Insider 


Installations 


Intelligent 

Terminal 


Interim Security 
Clearance 


Intrinsic 

Radiation 

(INRAD) 

Intrusion 
Detection System 
(IDS) 


Joint 

Communications 
Support Element 
(JCSE) 

Joint 

Communications 
Contingency 
Station Assets 


(U) HE that requires a shock of more than usual strength to 
cause detonation; this relative insensitivity contributes to 
weapon safety. 

(U) A person who, by reason of official duties, has knowledge 
and/or position that would significantly enhance the likelihood 
of successful bypass or defeat of positive measures should that 
person attempt such an action. See also Cognizant Agent and 
Third Party Agent. 

(U) Real DoD properties including bases, stations, forts, depots, 
arsenals, plants (both contractor and Government operated), 
hospitals, terminals, and other special mission facilities, as well 
as toose used primarily for military purposes. 

(U) A terminal that is programmable, able to accept peripheral 
devices, able to connect with other terminals or computers, able 
to accept additional memory, or which may be modified to have 
these characteristics. 

(U) A security clearance based on the completion of minimum 
investigative requirements, which is granted on a temporary 
basis, pending the completion of the full investigative 
requirements. 

(U) Any radiation emitted through the outer surface of a nuclear 
weapon in its normal storage condition. 


(U) An alarm system consisting of sensor(s) capable of detecting 
one or more types of phenomena, signal media, armunciator(s), 
and energy source, for signalling the entry or attempted entry of 
a person or other target into the area protected by the system. 

(U) A communications element that provides high frequency, 
very high frequency, secure and super high frequency satellite 
terminals and other equipment. 


(U) The communications station provides high frequency radio, 
tropospheric scatter terminals, automatic digital network 
terminals, manual secure voice and other equipment. 


Joint Hazard 
Evaluation 
Center (JHEC) 


(U) A facility, staffed by representatives from each of the 
agencies conducting hazard survey data and radiological 
safety/health physics matters on-site. 


Joint 

Information 
Center (JIC) 


(U) A facility at the scene of a nuclear weapon accident or 
significant incident to coordinate all public affairs. The JIC 
Includes representation from DOE. DoD, FEMA, DoS. and other 
Federal agencies, as well as state, local, and/or foreign 
governments. 
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Joint Nuclear 
Accident 
Coordinating 
Center (JNACC) 


Joint Nuclear 
Weapon 
Publication 
System (JNWPS) 


Joint Test 
Assembly (JTA) 


Kiloton (kt) 


Lateral Dispersal 


Launching 


Licensed 

Material 


Limited Access 
Authorization 


(U) The DoD and DOE operate coordinating centers for 
exchanging and maintaining information about radiological 
assistance capabilities and activities. These centers are 
separated geographically, but linked by direct communications 
networks. 

(U) The JNWPS is a system of technical manuals on nuclear 
weapons and associated materiel and such supplemental 
information or data determined appropriate by either the DoD or 
the Department of Energy (DOE) in connection with the general 
field of nuclear weapons. The JNWPS exists as a means of 
providing to the DOE, DNA, and to the respective DoD military 
departments (Army, Navy and Air Force), authoritative 
Instructions and procedural data on the technical aspects of 
nuclear weapons and associated equipment to supplement 
existing publication systems of the participating 
agencies/ Services. 

(U) A DOE-developed configuration based on DOE-DoD 
requirements for use in a Joint flight test program, composed of a 
Joint-test subassembly and war reserve weapon components. The 
physiceil appearance and characteristics of a JTA will 
approximate a war reserve configuration to the extent 
practicable. JTAs are produced in two ways: 

• (U) Prebuild: For weapon systems whose design requires the 
JTAs to be completely prebuUt as new production. 

• (U) Rebuild: Using components from stockpiled war reserve 
weapons plus Joint-test subassemblies from new production. 

(U) Energy equivalent to that released by the explosion of 1000 
tons of TNT. 10’2 calories, or 4.18 x 10^2 joules; a measure of 
yield. 

(U) Movement of nuclear weapons and dual-capable aircraft from 
a main operating base to outlying, contingency operating bases: a 
method of enhancing survivability in the event of Increased 
tension or hostilities. 

(U) Propulsion of a missile with a nuclear warhead into 
controlled flight or uncontrolled flight beyond the immediate 
area of the launch site. 

(U) Source material, special nuclear material received, possessed, 
used, or transferred under a general or specific license issued by 
the Nuclear Regulatory Commission or a state. 

(U) Authorization for access to CONFIDENTIAL or SECRET 
information granted to non-United States citizens and 
Immigrant aliens, which is limited to only that information 
necessary to the successful accomplishment of their assigned 
duties and based on a background investigation scoped for 10 
years. 
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Limited Area 


Limited-Life 
Component (LLC) 


Lock 


Logistic 

Movement 


Logistic System 


Maintenance 

Facilities 


Maximum 
Permissible Dose 


Maximum 

Readiness 

Megaton (Mt) 


Memory Phrase 


Memory Phrase 
Enveiopes 


Miiitary 

Characteristics 

(MCs) 


(U) A designated area immediately surrounding one or more 
Exclusion Area(s) : normally, this Is between the boundaries of 
Exclusion Area(s) and the outer or inner barrier or boundary of 
the perimeter security system. 

(U) A weapon component that deteriorates in some respect over 
time, and must be replaced periodically during weapon stockpile 
life: principal classes of LLCs are reservoirs, neutron generators, 
and parachutes. 

tU) The act of rendering a nuclear weapon Incapable of achieving 
a nuclear yield by the application or activation of a positive 
control device. The act is reversible. 

(U) The transport of war reserve fWR) nuclear weapons by any 
appropriate noncombat delivery vehicle outside a permanent 
limited /exclusion area. 

(U) The organizations, vehicles, and support equipment 
employed for the loading, movement and transfer of nuclear 
weapons and nuclear components (except limited life components 
(LLCs)). but explicitly excluding nuclear-capable combat delivery 
vehicles. 

(U) Those buildings or structures In which nuclear weapon ' 
Inspections, checkout, assembly, or maintenance operations are 
performed. 

(U) That radiation dose which a military commander or other 
appropriate authority may prescribe as the limiting cumulative 
radiation dose to be received over a specific period of time by 
members of the command, consistent with operational military 
considerations. 



(U) Energy equivalent to that released by the explosion of 
1.000.000 tons of TNT. 10^® calories, or 4.18 x 10^® joules: a 
measure of yield. 

(U) A split-knowledge classified phrase Inserted into APG to 
access stored encrypted information contained in data files. 
Memory phrase use allows performance of code operations. 

(U) Printed products containing classified English-language 
phrases used as cryptograhlc keying data by the APC's crypto 
logic. Two memory phrases are required for each APC PROM 
data file. MP envelopes are produced, handled, and used under 
two-person control, split-knowledge conditions. 

(U) A document, developed for each nuclear weapon, that states 
the performance requirements and physical characteristics for 
those parts of a nuclear weapon that are the sole responsibility of 
the DOE to design, develop, certify, and produce. They begin as a 
statement of desired DoD performance objectives and become 
design requirements only after formal acceptance by the DOE. 
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National Agency 
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(U) A launch, release, or transfer for use of nuclear weapons, 
authorized by the National Command Authority, resulting from a 
decision based upon reporting of erroneous warning data, 
misinterpretation of warning data, or miscalculation of the 
intentions of a potentially hostile nation. 



(U) The act of detecting the presence of radiation and the 
measurement thereof with radiation measuring instruments. 

CU) A mode of operation that allows two or more classification 
levels of information to be processed simultaneously within the 
same system when not all users have a clearance or formal 
access approval for all data handled by the Automated 
Information Systems. 



(U) A personnel security investigation consisting of a records 
review of certain national agencies as prescribed in paragraph 1. 
Appendix B. this Regulation. Including a technical fingerprint 
search of the files of the Federal Bureau of Investigation (FBI). 

(U) See Joint Pub 1-02, 1 Dec 89 


(U) An area established on non-Federal lands located within the 
United States, its possessions, or territories, for the purpose of 
safeguarding classified defense information, or protecting DoD 
equipment and/or material. Establishment of a National 
Defense Area temporarily places such non-Federal lands under 
the effective control of the DoD and results only from an 
emergency event. The senior DoD representative at the scene will 
define the boundary, mark it with a physical barrier, and post 
warning signs. The landowner’s consent and cooperation will be 
obtained whenever possible: however, military necessity will 
dictate the final decision regarding location, shape, and size of 
the NDA. 
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Nationai 
Military 
Command 
System (NMCS) 


National 

Security 

National 
Security Area 
(NSA) 


Need-to-Know 


Network 


No*Knowledge 


No-Knowledge 

Recode 


Noncombat 
Delivery Vehicle 


Nonsealed 

Authentication 

S}Tstem 


(U) Designed to support the President and the Secretary of 
Defense in exercising their responsibilities for the direction of 
US Armed Forces and the Chairman of the Joint Chiefs of Staff 
In executing his responsibilities. The NMCS consists of facilities 
Including the National Military Command Center, the Alternate 
National Military Command Center, the National Emergency 
Airborne Command Post, and other command centers that may 
be designated by the Secretary of Defense. The NMCS also 
Includes data processing systems and networks, display systems, 
communications systems, procedures and personnel. 

(U) National security means the national defense and foreign 
relations of the United States. 

tU) An area established on non-Federal lands located within the 
United States, its possessions, or territories, for safeguarding 
classified information, and/or restricted data or equipment or 
material belonging to DOE. Establishment of an NSA 
temporarily places such non-Federal lands under the effective 
control of the DOE and results only from an emergency event. 

The senior DOE representative having custody of the material at 
the scene shaU define the boundary, mark it with a physical 
bcirrler. and post warning signs. The landowner’s consent cind 
cooperation shall be obtained whenever possible: however, 
operational necessity shall dictate the final decision regarding 
location, shape and size of the NSA. 

(U) A criterion in security procedures which requires the 
custodians of classified Information to establish, prior to 
disclosure, that the intended recipient must have access to the 
Information to perform his official duties. 

fU) A network is composed of a communications medium and all 
components attached to that medium whose responsibility Is the 
transference of information. Such components may Include 
Automated Information Systems, packet switches, 
telecommunications controllers, key distribution centers, and 
technical control devices. 

(U) Cypher materials produced, controlled and stored so no 
Individual is knowledgeable of the cypher values. 

(U) Changing the PAL codes by use of key split-knowledge 
memory phrases. APC. and PROM. SDM. or PDM files without 
operator knowledge of the codes being Introduced into the PAL 
device. 

(U) Any vehicle used for the movement of nuclear weapons, but 
not the subject of specific nuclear safety rules approved by the 
Secretary of Defense in accordance with DoD Directive 3150.2. 
"Safety Studies and Reviews of Nuclear Weapons Systems." 
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Nonstrategic 
Nuclear Forces 
(NSNF) 


Nonviolent 

Disablement 

(NVD) 


(U) Those nuclear-capable forces, located In an area of military 
operations, with a capability to employ nuclear weapons by land, 
sea, or air forces against opposing forces, supporting 
installations, or facilities. Such forces may be employed, when 
authorized by competent authority, to support operations that 
contribute to the accomplishment of the military commander's 
mission within the theater of operations. This term shall be 
used instead of the term "theater nuclear forces (TNF)." 

(U) Nuclear weapon disablement which, through the destruction 
or disassociatlon of one or more key components, temporarily 
destroys a weapon's ability to be used in its Intended mode. NVD 
may not preclude the weapon's ability to be used in other than its 
intended mode. The effects of NVD are confined to the weapon 
case or the weapon shipping and storage container. Methods of 
NVD include: 

• Disassociatlon 

• Destruction of components 

• Command Disablement (CD) 


Normal 

Environments 


NSNF Security 


NSNF 

Survivability 


NSNF 

Survivability 
and Security (S2) 
Scope 


NSNF Weapon 
Systems 


(U) The expected logistical and operational envlromnents 
defined in the stockpUe-to-target sequence document that the 
weapon system is required to survive without degradation in 
operational reliability. 

(U) The protection of all mission-essential NSNF assets to 
prevent the theft or diversion and/or the unauthorized 
detonation of a tactical nuclear weapon or component, and to 
prevent unauthorized access to and/or damage and/or sabotage to 
a tactical nuclear weapon or component. 

(U) The capability of NSNF and NSNF supporting systems and 
facilities to endure in order to maintain the ability to execute 
their assigned missions. 

(U) That scope applies to all of the following: 

• (U) All Mission-Essential Assets . Personnel, equipment, 
facilities, nuclear and nonnuclear elements of weapon systems, 
and weapon systems support. 

• tU) The Entire Threat Spectrum . Unconventional, 
conventional, chemical, and nuclear, 

• (U) All Force Postures . Nondispersed and/or nondeploy ed, 
dispersing and/or deploying, and dispersed and/or deployed. 

• (U) Doctrine. Organization. Procedures. Training, and 
Equipment. 

(U) Includes the nuclear weapon, a means of delivering it to the 
target, associated support equipment (facilities, etc.), and 
personnel. 
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Nuclear Accident 
and Incident 
Control Team 
(NAIC) 


Nuclear Accident 
Response 
Capabilities 
Listing (NARCL) 

Nuclear 

Assembly System 
(NAS) 


Nuclear Certified 
Computer Data 


Nuclear 
Command and 
Control (NC2) 


Nuclear 
Command and 
Control System 
(NCCS) 


Nuclear 

Components 


Nuclear 

Contribution 


(U) An Army team organized to minimize and prevent the loss of 
life, personal injury, hazardous effects, and destruction of 
property, to secure classified material, and to enhance and 
maintain the public's confidence In the Army's ability to respond 
effectively to a nuclear accident or Incident. 

(U) A listing of DoD and DOE instzdlatlons, facilities, or 
activities with nuclear accident/incident response and radiation 
detection capabilities. 


• (U) For Implosion-assembled weapons: The HE. pit (Including 
nuclear components and internal Initiator, If present), nuclear 
safing system, and detonators, but not fuzing components, firing 
sets, cables, external Initiators, or reservoirs. 


• (U) For gun-assembled weapons: The gun barrel, propellant 
assembly and igniter, nuclear components, initiator, and tamper. 



(U) The exercise of authority and direction by the President, as 
Commander In Chief, through established command lines, over 
nuclear weapon operations of military forces; as Chief Ebcecutive 
over all government activities that support those operations: and 
as Head of State over required multinational actions that support 
those operations. 

(U) The designated combination of flexible and enduring 
elements including facilities, equipment, communications, 
procedures, personnel, and the structure In which these elements 
are Integrated, all of which are essential for plannmg. directing, 
and controlling nuclear weapon operations of military forces and 
the activities that support those operations. 

(U) Weapon components composed of fissionable or fusionable 
materials that contribute substantially to nuclear energy released 
during detonation. These include boosting materials but not 
initiator materials. 

(U) Explosive energy released by nuclear fission or fusion 
reactions, as part of the total energy released by the accidental 
explosion of a nuclear weapon. Any nuclear contribution 
equivalent to four or more pounds of TNT Is considered 
significant, and would add beta and gamma radiation hazards to 
other radiological and toxic hazards present at a nuclear weapon 
accident site. 
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Nuclear Control 
Order 


Nuclear 

Detonation 

(NUDET) 


(U) A decrypted emergency action message, in the proper format, 
properly authenticated, and containing information consistent 
with known preplanned data authorizing actions affecting 
nuclear weapons. 

(U) A nuclear explosion resulting from fission of fusion 
reactions in nuclecir materials, such as from a nuclear weapon. 


Nuclear 
Emergency 
Search Team 
(NEST) 

Nuclear 

Radiation 


Nuclear Safety 


Nuclear Safing 


Nuclear Security 


Nuclear Weapon 


Nuclear Weapon 
Accident 


(U) The NEST is a DOE asset with specialized equipment for 
conductmg radiation survey and detection, field 
commurncations, EOD support, bomb /weapon diagnostics, hazard 
prediction, damage mitigation, and decontammatlon. 

(U) Particulate and electromagnetic radiation emitted from 
atomic nuclei in various nuclear process. The Important nuclear 
radiations, from the weapons standpolnt.are alpha and beta 
particles, gamma ray, and neutrons. All nuclear radiations are 
lonlzmg radiations, but the converse is not true. 

(U) Collection of measures to protect nuclear weapon ^sterns 
against the risks and threats inherent in their environment. 

(U) The prevention of a nuclear yield in the event of accidental 
detonation of the HE of a high explosive assembly weapon or 
ignition of the propellant of a gun assembfy weapon. 

(U) Collection of measures taken to protect physical items and 
Information and to prevent deliberate damage to, disruption of, 
or loss of any element of the nuclear command and control 
system or nuclear weapon program. 

(U) A device in which the explosion results from the energy 
released by reactions mvolvlng* atomic nuclei, either fission or 
fusion, or both. 

(U) An unexpected event Involving nuclear weapons or nuclear 
components that results m any of the followmg: 

• (U) Accidental or unauthorized launching, firing, or use by US 
forces or US supported allied forces of a nuclear capable weapons 
system. 

• (U) An accidental, unauthorized, or unexplained nuclear 
detonation. 

• (U) Non-nuclear detonation or burning of a nuclear weapon or 
nuclear component. 

• (U) Radioactive contamination. 

• (U) Jettisoning of a nuclear weapon or nuclear component. 

• (U) Public hazard, actual or perceived. 
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Nuclear Weapon 
Incident 


Nuclear Weapon 
Movement ~ 


Nuclear Weapon 
Personnel 
Reliability 
Program (PRP) 

Nuclear Weapon 
Safety Standards 


Nuclear Weapon 
Safety Study 
Group (NWSSG) 


(U) An unexpected event Involving a nuclear weapon, facility, or 
component resulting In any of the following, but not constituting 
a nuclear weapon(s) accident: 

• (U) An increase in the possibility of explosion or radioactive 
contamination. 

• (U) Errors committed in the assembly, testing, loading, or 
transportation of equipment, and/or the malfunctioning of 
equipment amd material which could lead to an unintentional 
operation of all or part of the weapon arming and/ or firing 
sequence, or which could lead to a substantial change in yield, or 
increased dud probability. 

• (U) Any act of God, unfavorable environment, or condition 
resulting in damage to a weapon, facility, or component. 

(U) The transport of nuclear weapons by any appropriate 
noncombat delivery vehicle will be as follows; 

• (U) Logistic Movement. All movement of nuclear weapons and 
nuclear components by a noncombat vehicle, from the secure 
environment of a storage or alert area, not conducted in response 
to an increased readiness condition or wartime emergency plan. 

• (U) Tactical Movement. That movement of nuclear weapons or 
nuclear components made to support emergency plans or an alert 
posture during an Increased readiness condition which 
authorizes a unit to remove nuclear weapons from their storage 
configuration in preparation for deployment to other locations. 

tU) The program which establishes personnel reliability 
standards for individuals performing duties associated with 
nuclear weapons. 


(in There shall be positive measures to prevent nuclear weapons 
involved in accidents or incidents, or Jettisoned weapons from 
producing a nuclear yield. 

(U) There shall be positive measures to prevent deliberate 
prearming, arming, launching, firing, or releasing of nuclear 
weapons, except upon execution of emergency war orders or when 
directed by competent authority. 

(U) There shall be positive measures to prevent inadvertent 
prearming, arming, launching, firing or releasing of nuclear 
weapons in all normal and credible, abnormal environments, 

(U) There shall be positive measures to ensure adequate security 
of nuclear weapons pursuant to DoDD 5210.41. 

(U) Joint DoD-DOE study groups, chaired by a Military Service, 
that periodically analyze each nuclear weapon system to ensure 
it meets the four nuclear weapon safety standards. 
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(U) An unexpected event involving nuclear weapons or nuclear 
weapon components or a nuclear weapon transport or launch 
vehicle when a nuclear weapon is mated, loaded, or on board that 
does not fall in the nuclear weapon accident category but: 

• (U) Results in evident damage to a nuclear weapon or 
radiological nuclear weapon component to me extent that major 
rework, complete replacement, or examination or recertification 
by the DOE is required. 

• (U) Requires immediate action in the Interest of safety or 
nuclear weapons security. 

• (U) May result in adverse public reaction (national or 
international) or inadvertent release of classified information. 

• (U) Could lead to a nuclear weapon accident and warrants that 
senior national officials or agencies be Informed or take action, 

(U) Materiel, personnel, and procedures which contribute to the 
security, safety, and reliability of nuclear weapons and to the 
assurance that there will be no nuclear weapon accidents, 
incidents, unauthorized weapon detonations, or degradation in 
performance at the target. 

(U) A nuclear weapon and a means for delivering it to the target 
with associated support equipment, noncombat delivery vehicles, 
facilities, procedures, and personnel. 

(U) A Service or DNA inspection of a nuclear-capable unit 
conducted to examine nuclear weapons technical assembly, 
maintenance, storage functions, logistic movement, handling, 
and safety and security directly associated with these functions. 
The NWn is encompassed within the following inspections: 

• (U) Defense Nuclear Surety Inspection (DNSI) conducted by 
DNA. 

• (U) Nuclear Surety Inspection (NSI) conducted by the Army. 

• (U) Navy Technical Proficiency Inspection (NTPI) and Nuclear 
Weapons Acceptance Inspection (NWAI) conducted by the Navy. 

• (U) Nuclear Surety Inspection (NSI) and Initial Nuclear Surety 
Inspection (INSI) conducted by the Air Force. 

(U) An energy release through nuclear fission or fusion 
equivalent to or greater than the energy released by detonation of 
4 pounds (1.8 kilograms) of TNT. Also called nuclear detonation. 

(U) A unit or an activity assigned responsibilities for 
assembling, maintaining, transporting, or storing war reserve 
nuclear weapons, their associated components and ancillary 
equipment. 
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(U) A military unit organized and trained to transport, store, 
maintain, provide security for, or employ nuclear vireapon 
systems. 

(U) Activation of an alarm sensor by some influence for which 
the sensor was designed but which is not related to an Intrusion 
attempt. 

(U) A master list, split into Parts A and B, containing all of the 
plain text operational PAL combinations within a command. 
NMLs are produced, handled, and used under strict two-person 
control, split-knowledge procedures. 

(U) The Flag or General Officer designated to command the DoD 
response efforts at the accident site. 


tU) That area around the scene of a nuclear weapon accident or 
significant incident under the operational control of the 
installation commander, facility manager, DoD OSC, or DOE 
team leader. The on-site area includes any area which has been 
established as an NDA or NSA. 


(U) A detonation of HE (High Explosives) initiated at a single 
point. 


(U) The criterion for design safety that a weapon must have less 
than one chance in a million of producing a nuclear yield of 
more than four pounds of TNT (equivalent energy release) when 
the high explosive is initiated and detonated at any single point. 


-m- 






— (< 3 ^ 




(U) A facility from which operations are controlled or directed. 
These facilities Include command centers, alternate command 
centers, command posts (mobile and fixed), emergency actions 
elements, combat alert or operations centers, airborne command 
posts, and similar facilities. 

(U) The process of denying adversaries information about 
friendly capabilities and Intentions by identifying, controlling, 
and protecting indicators associated with planning and 
conducting military operations and other activities. 

(U) Enriched uranium. One of the primary fissionable materials 
in nuclear weapons. 
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Orange Book 
Terminology 


Outbreak of 
Nuclear War 


Outsider 
PAL Material 


PAL or CS 
System 


PAL Recode Team 


PAL Unit Card 

PAL Unlock 
Value 


Partitioned 
Security Mode 


Periodic 

Reinvestigation 

(PR) 


(U) Reference (k), also called the Orange Book, classified 
Automated Information Systems (AIS) into four broad 
hierarchical divisions of security protection. Within divisions C 
and B there are further subdivisions called classes. These classes 
also are ordered in a hierarchical manner characterized by the 
set of computer security features they possess (see Security 
Features definition). 

(U) The Initiation of actual authorized or intended nuclear 
weapon use by one country against another, ranging in scope 
from use of a single weapon to a full-scale nuclear exchange. 


(U) See Third Party Agent. 



(U) A team composed of US commissioned officer, warrant 
officers, or noncommissioned officers in the grade of E-6 or 
above who insert numerical combinations into the PAL devices. 
At least one member of the team is a commissioned or warrant 
officer. Recoding with APCs on a no-knowledge basis may be 
accomplished by a recode team composed of noncommissioned 
officers in the grade of E-7 or higher. (Recoding operations and 
personnel requirements at a depot using CLS and/ or Depot 
Storage Codes will be in accordance with the applicable Joint 
Nuclear Weapons Publication.) 


(U) See Unit Card. 



(U) A mode of operation wherein all personnel have the 
clearance, but not necessarily formal access approval and need- 
to-know for all information handled by the Automated 
Information Systems. This security mode encompasses the 
compartmented mode defined in DCID No. 1/6. reference (g). 

(U) An investigation conducted every 5 years for the purpose of 
updating a previously completed background or special 
background investigation on persons occupying positions 
referred to in paragraphs 3-700 through 3-710. The scope will 
consist of a personal interview. NAC, LACs. credit bureau checks. 
emplojTTient records, employment references and developed 
character references and will normally not exceed the most 
recent 5 year period. 
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Permissive 
Action Link 
(PAL) 


Permissive 
Action Link 
(PAL) Command 

Permissive 
Action Link 
(PAL) 

Management 
Control Team 


Permissive 
Action Link 
Codes 


Personnel 
Reliability 
Program (PRP) 


Personnel 

Security 

Investigation 

(PSD 


(U) A device included in or attached to a nuclear weapon system 
to preclude arming and/or launching until the insertion of a 
prescribed discrete code or combination. It may include 
equipment and cabUng external to the weapon or weapon system 
to activate components withm the weapon or weapon system. 

(U) A code or other signal which will cause or permit operation 
of a permissive action link. 


(U) A team composed of at least four US military personnel 
responsible for the management and control of the unified or 
specified command PAL program. The team is divided into A 
and B sections with a minimum of two persons in each section. 

At least one member of each section is a commissioned or 
warrant officer. Noncommissioned officers in grade E-7 and 
above may participate as one half of an A or B Team as required. 

• (U) PAL-Classified Logistic Shipment Code; A PAL code used 
only during logistics shipment of nuclear weapons. See classified 
logistic shipment code. 

• (U) PAL-Code Identifier: Unclassified alphanumeric sequence 
corresponding to the appropriate PAL code above. See code 
identifier. 

• (U) PAL-Depot Storage Code: A PAL code used only during 
temporary storage of nuclear weapons when operational codes 
are not appropriate. See depot storage codes. 

• (ID PAL-Operational Code: A PAL code used within a specified 
or unified command to lock or unlock nuclear weapons. See 
operational combination or code. 

(U) A DoD program Implemented for all personnel who control, 
handle, have access to. or control access to nuclear weapon 
systems. The program covers selection, screening, and 
continuous evaluation of the personnel assigned to various 
nuclear duties. The program seeks to ensure that personnel 
coming under its purview are mentally and emotionally stable 
and reliable. 

(U) Any Investigation required for the purpose of determining 
the eligibility of DoD military and civilian personnel, contractor 
employees, consultants, and other persons affiliated with the 
Department of Defense, for access to classified information, 
acceptance or retention in the Armed Forces, assignment or 
retention in sensitive duties, or other designated duties requiring 
such investigation. PSIs Include Investigations of affiliations 
with subversive organizations, suitability information, or 
hostage situations (see paragraph 2-403) conducted for the 
purpose of making personnel security determinations. They also 
include investigations of allegations that arise subsequent to 
adjudicative action and require resolution to determine an 
individual's current eligibility for access to classified 
information or assignment or retention in a sensitive position. 
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Physical Security 


Physical Security 
Equipment (PSB) 


Pindown 

Plutonium (Pu) 
Plutonium Limit 

PMCT One-Time 
Pad 


(U) That part of security concerned with physical measures 
designed to safeguard personnel; 'to prevent or delay unauthorized 
access to equipment, installations, material and documents; and 
to safeguard them against espionage, sabotage, damage, and theft. 

(U) A generic term encompassing any item, device, or system that 
is used primarily for the protection of Government property, 
including nuclear, chemical, and other munitions, personnel, 
installations, and in the safeguarding of national security 
information and material, including the destruction of such 
information and material both by routine means and by 
emergency destruct methods. 

(U) A deliberate action taken by an adversary to disrupt the 
nuclear command and control system which precludes the 
Intended authorized use of nuclear weapons. Pindown may be an 
Intended or unintended byproduct of a sepeirate, deliberate 
adversary action. 

(U) An artificially produced fissile material. The Pu-239 is 
primzudly used in nuclear weapons. 


(U) The maximum amount of fissile materials, usually stated as 
kilograms of Pu. that may be contained among all nuclear 
weapons in a particular storage or transport volume or space. 
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PredlctabUity 

Measures 


President 


Prevent 


Primary 


Principal NC2 
Decision Makers 


rai AcUons designed to increase openness and predictability, 
taken between parties to enhance mutual knowledge and 
“dcrsSSSboth sides' tnUltsiy acUvltles to reduce the 
SsslS^^fonnict occuntng as the result of 
miscalculation or misinterpretation of actions. Such actions 
SS? toclude notification. observaUon. forecasting, and/or 
Inspection of military exercises. 

tin "President" as used in this dlrecUve. includes an o^c^aj 
Scewds to the Office of the Presidency under the Constitution 

and under 3.U.S.C. 19. as well. 

tin As used in the DoD Nuclear Weapon System 

assurance that the event will not occur. 


Programmable 

Read-Only 

Memory 


Properly Cleared 


Purge 



Quantity / 
Distance (QD) 
Safety Standards 

Radioactivity 


control material involved. 

fin Removal of sensitive data from an Automated Infomation 
Systems at the end of a period of processing, including from 

is insurance proportional to the sensitivity , * ^ firk-n 

a purge. 

nn Directives pertaining to the amounts and kinds of 
Shat can be ato?ed and the proxhnlg 
highways, railways, magazines, and o 

fin The spontaneous emission of radiation, generally alpha or 
™ a^itSes'^Si accompanied by gamma rays from the nuclei 

rs-n 1 mQt iSOtOOe* 
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Radiological 

Accident 


Radiological 

Assistance 


Radiological 
Assistance 
Program Team 
(RAP Team) 

Radiological 

Control 

(RADCON) Team 

Radiological 
Control Area 
(RCA) 

Radiological 

Survey 

Re-entiy 

Recommendation 

(RER) 


Real Time 
Assessment 


Reassociation 


(U) A loss of control over radiation or radioactive material that 
presents a hazard to life, health’ or property or that may result 
in any member of the general population exceedmg exposure 
limits for ionizing radiation. 

(U) That assistance provided after an accident involving 
radioactive materials to: 

• (U) Evaluate the radiological hcizard. 

• (U) Accomplish emergency rescue and first aid. 

• (U) Minimize safety hazards to the public. 

• (U) Minimize exposure of personnel to radiation or radioactive 
material. 

• (U) Minimize the spread or radioactive contammation. 

• (U) Minimize damaging effects on property. 

• (U) Disseminate technical information and medical advice to 
appropriate authorities. 

(U) DOE teams available through DOE regional offices to assist 
in radiological emergencies. 


(U) Special radiological teams of the US Army and US Navy 
organized to provide technical assistance and advice in 
radiological emergencies. 

(U) ■ The control area encompassing all known, or suspected, 
radiological contamination at a nuclear weapon accident. 


(U) The directed effort to determine the distribution of 
radiological material and dose rates in an area. 

Advice provided to the State concerning guidance that may be 
issued to members of the public on returning to an area affected 
by a radiological emergency, either permanently or for short- 
term emergency actions. 


(U) Instantaneous assessment of the actual cause for activation 
of the sensor alarm by either direct visual assessment or with the 
aid of electro-opUcal equipment, e.g., closed circuit television. 
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Recode 

Recoveiy 

Procedures 

Release 

Releasing 

Reliability 

Remote Destruct 

Render Safe 
Procedures 

Reserve 

Editions 

Residual 

Contamination 

Residual 

Radiation 

Response Force 


Restricted Area 


(U) An operation changing a combination or code previously set 
Into a PAL. CSS. or PES device so the device can be unlocked, 
locked, or recoded when the new combination or code Is 
subsequently Inserted. 

CU) See Explosive Ordnance Disposal Procedures. 



(y) The separation of a missile or graAdty bomb with a nuclear 
warhead from a delivery aircraft. 


tU) The probability, without regard to countermeasures, that a 
nuclear weapon, sub-assembly, component, or other part will 
perform In accordance with Its design intent or requirements. 
Statements of functlonablllty. as well as dud or other failure 
probabilities, are included. 


(U) A device and/or system which precludes nuclear detonation 
of a launched nuclear weapon and may also terminate Its flight. 

tU) See Explosive Ordnance Disposal Procedures. 


(U) Editions of sealed authentication or PAL. CSS. or PES 
material that have not been designated EFFECTIVE. 

(U) Contamination which remains after steps have been taken to 
remove it. These steps may consist of nothing more than 
allowing the contamination to decay naturally. 

(U) Fission products and radioactive debris from a nuclear 
explosion, including radioactivity induced in the surrounding 
environment. 

(U) A security force of personnel (not including those on fixed 
guard posts), appropriately armed and equipped, whose primary 
duty is to provide Initial or follow-up response to those 
situations which threaten or affect the security of the nuclear 
weapons concerned. Response forces and times for shipboard 
application shall be as set forth in Chapter XIII. 

(U) An area to which entry Is subject to special restrictions or 
control for security reasons, or to safeguard property or material. 
This does not Include those designated areas restricting or 
prohibiting overflight by aircraft. Restricted areas may be of 
different types depending on the nature and varying degree of 
importance of the security Interest, or other matter contained 
therein. Restricted areas must be authorized by the 
Installation/ activity commander, properly posted, and shall 
employ physical security measures. 
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Restricted Data 


Retrofit Program 


RP, Radio, or 
Radar Blackout 


Risk 


Risk Analysis 


Risk Index 


Risk 

Management 


Risk Reduction 
Measures 


Roentgen 


Roentgen 
Equivalent Man/ 
Mammal (rem) 


Safeguards 


(U) All data (information) concerning (a) design, manufacture, or 
use of atomic weapons: (b) the production of special nuclear 
material; or (c) the use of special nuclear material in the 
production of energy. The term does not include data declassified 
or removed from the restricted data category pursuant to Section 
142 of the Atomic Energy Act of 1954. 

(U) A program to make approved specified changes to existing 
nuclear weapons or parts; may be carried out at production, 
assembly, storage, or deployment sites. 

(U) Complete disruption of RF (radio frequency) signals over 
large areas caused by ionization from the radiative outputs of a 
high-altitude nuclear explosion. 

(U) A combination of the likelihood that a threat shall occur, the 
likelihood that a threat occurrence shall result in an adverse 
impact, and the severity of the resulting adverse Impact. 

(U) An analysis of system assets and vulnerabilities to establish 
an expected loss from certain events based on estimated 
probabilities of occurrence. 

(U) The disparity between the minimum clearance or 
authorization of Automated Information Systems’ (AIS) users 
and the maximum sensitivity (e.g., classification and categories) 
of data handled by the AIS. 

(U) The total process of identifying, measuring, and minimizing 
uncertain events affecting Automated Information Systems 
resources. It includes risk analysis, cost benefit analysis, 
safeguard selection, security test and evaluation, safeguard 
Implementation, and systems review. 

(U) That combination of confidence building and predictability 
measures that would reduce the probability of outbreak of 
nuclear war as a result of accident, misinterpretation, 
miscalculation, terrorism, or unexpected technological 
breakthrough. These need not be unilateral steps and they 
require communication to others and/or participation by others 
to be effective. 

(U) An obsolete unit of exposure of gamma (or X-ray) radiation in 
field dosimetry. One roentgen is essentially equal to one rad. 

(U) One rem is the quantity of ionizing radiation of any type 
which, when absorbed by man or other mammals, produces a 
physiological effect equivalent to that produced by the absorption 
of one (1) roentgen of X-ray or gamma radiation. The SI unit 
replaced the rem. 

(U) An Integrated system of physical protection, material 
accounting, and material control measures designed to deter, 
prevent, detect, and respond to unauthorized access, possession, 
use, or sabotage of nuclear weapons, NC2, and associated 
information and facilities. 


42 


T>A*T^A 


S ECRE T — RESTRICTED DATA 


Safety Rules 
Safing 

SAS Identifier 
Sealed 

Authentication 
System (SAS) 

Sealed 

Authenticator 

Sealed Pit 

Secondary 

Security 

Security Area 


Secmlty 

Clearance 

Security Features 
Security Force 


(U) Procedural safeguards for nuclear weapon systems that are 
derived from safety studies or operational safety reviews, are 
developed and processed under this Directive, and are approved 
by the Secretary of Defense. 


(U) As applied to weapons and ammunition, the changing from a 
state of readiness for initiation to a safe condition. 



(U) One that Is hermetically closed to protect nuclear materials 
from the external environment, 

(U) A nuclear stage physically separate from the primaiy. 

(U) The total spectrum of procedures, facilities, equipment, and 
personnel employed to provide a secure environment for nuclear 
weapons. 

(U) The area surrounding the accident site in an overseas country 
where a two-person security policy Is established to prevent 
unauthorized access to classified defense Information, equipment 
or material. The cooperation by local authorities and host 
countries consent should be obtained prior through host nation 
agreements. , 

(U) A determination that a person is eligible under the standards 
of this Regulation for access to classified Information. 

(U) The security-relevant functions, mechanisms, and 
characteristics of Automated Information Systems hardware and 
software (e.g.. Identification, authentication, audit trail, access 
control). 

(U) Those persons whose primary duties are to protect nuclear 
weapons. 
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Security Mode 


Security 

Safeguards 


Selective Release 


Selective Unlock 
Value 


Senior FEMA 
Official (SFO) 

Senior Officer of 
the Intelligence 
Community 
(SOIC) 


Sensitive 

Compartmented 

Information 

(SCI) 

Sensitive 

Function 


Sensitive 

Information 


(U) A mode of operation in which the DAA accredits an 
Automated Information Systems to operate. Inherent with each 
of the four security modes (dedicated, system high, multilevel, 
and partitioned) are restrictions on the user clearance levels, 
formal access requirements, need-to-know requirements, and the 
range of sensitive information permitted on the Automated 
Information Systems. 

(U) The protective measures and controls that are prescribed to 
meet the security requirements specified for an Automated 
Information Systems. These safeguards may Include, but are not 
necessarily limited to, hardware and software security features: 
operation procedures: accountability procedures: access and 
distribution controls: management constraints: personnel 
security: and physical structures, areas, and devices. 



(U) A person appointed by the Director of FEMA to coordinate 
the Federal Response to a civil emergency. 


(U) The DoD Senior Officers of the Intelligence Community 
include; the Director, National Security Agency/ Central Security 
Service: Director, Defense Intelligence Agency; Assistant Chief of 
Staff for Intelligence, US Army: Assistant Chief of Staff for 
Intelligence, US Air Force, and the Director of Naval Intelligence, 
US Navy. 

(U) Classified information about or derived from intelligence 
sources, methods, or analytical processes that is required to be 
handled exclusively within formal access control systems 
established by the Director, Central Intelligence. 

(U) A function in support of atomic energy defense programs 
whose disruption could reasonably be expected to have a 
significant adverse effect on the health and safety of the public or 
the common defense and security (see definition of Atomic 
Energy Defense Programs). 

(U) Any information, the loss, misuse, or unauthorized access to 
or modification of which could adversely affect the national 
Interest or the conduct of the Federal programs, or the privacy to 
which individuals are entitled under Section 552a of U.S.C. (The 
Privacy Act) but which has not specifically been authorized under 
the criteria established by an Executive order or Act of Congress 
to be kept secret in the Interest of national defense or foreign 
policy. 
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Sensitive 

Position 


Sensitive 

UnclassiHed 

Information 


Service 

Cryptologistic 

Element 


Service Response 
Force (SRF) 


Set 


Significant 
Quantity of 
Special Nuclear 
Material 


SIOP Unlock 
Value 


SIOP-ESI 


Site Security 
Control Center 
(SSCC) 


Small Arms Fire 


(U) Any position so designated within the Department of 
Defense, the occupant of which could bring about, by virtue of the 
nature of the position, a materially adverse effect on the national 
security. All civilian positions are either critical-sensitive, 
noncrltical-sensltlve, or nonsensitive as described in paragraph 
3-101. 

(U) Any information which by loss, misuse, unauthorized access, 
or modification might adversely affect US national interest, the 
conduct of DoD programs, or the privacy of DoD personnel (e.g., 
FOIA exempt information and information whose distribution is 
limited by DoD Directive 5230.24 

(U) The element or agency of each Military Department charged 
with accounting for PAL, CSS. or PES cipher system components 
and with distributing, storing, and accounting for other COMSEC 
material within the department. 

(U) A DoD response force appropriately manned, equipped, and 
able to perform and coordinate all actions necessary to control 
and recover from an accident or significant incident. The 
specific purpose of a Service/agency response force is to provide 
nuclear weapon accldent/slgnlficant incident assistance. 

Service /agency response forces are organized and maintained by 
those Services or agencies which have custody of nuclear 
weapons or radioactive nuclear weapon components. 



CU) Refers to uranium-235 (contained in uranium enriched 20 
percent or more in the uranium-235 isotope) alone, or in 
combination with plutonium and/or uranium-233 when 
(multiplying the plutonium and/or uranium-233 content by 2- 
1/2) the total is 5,000 grams (5 kilograms) or more: and 
plutonium and/or uranium-233 when the plutonium and/or 
uranium-233 content is 2,000 grams (2 kilograms) or more. 



(U) An acronym for Single Integrated Operational Plan- 
Extremely Sensitive Information, a DoD Special Access Program. 


(U) A facility from which control of site sentry and response 
forces is exercised. This facility may include the alarm center, 
the visual assessment facilities, and other appropriate security 
facilities. j 

(U) Projectiles of the ball type with Irhpact force up to that equal 
to a 7.62 mm bullet fired from an M-14 rifle or equivalent at its 
highest velocity using service ammunition. 
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•A, 


P ATA - 


Source Data 
Modules 


Special Access 
Program (SAP) 


Special 

Background 

Investigation 

(SBI) 


Special Nuclear 
Material 


Special Nuclear 

Material 

Equipment 


Special Nuclear 
Material Facility 



(U) Any program imposing need-to-know or access controls 
beyond those normally required for access to CONFIDENTIAL, 
SECRET, or TOP SECRET information. Such a program includes, 
but is not limited to. special clearance of investigative 
requirements, special designation of officials authorized to 
determine need-to*know, or special access lists of persons 
determined to have a need-to-know. 

(U) A personnel security investigation consisting of all of the 
components of a BI plus certain addition investigative 
requirements. The period of investigation for an SBI is the last 
15 years or since the 18th birthday, whichever is shorter, 
provided that the last 2 full years are covered and that no 
investigation will be conducted prior to an Individual’s 16th 
birthday. 

(U) Includes plutonium, uranium enriched in the isotope-233 or 
in the isotope-235, and any other material determined to be 
special nuclear material pursuant to the provisions of Section 51 
of the Atomic Energy Act of 1954, as amended . but does not 
include source material: or any material artificially enriched by 
any of the foregoing, but does not include source material. 

(U) Equipment, systems, or components whose failure or 
destruction would cause an impact on safeguarding DoD SNM 
resulting in an unacceptable interruption to a national security 
program or an unacceptable Impact on the health and safety of 
the public. 

(U) A DoD facility that performs a sensitive function (see 
definition of Sensitive Function). 


Special Weapons 
Overflight Guide 
(SWOG) 


Split Knowledge 


(U) A US Air Force developed guide, applicable to all elements of 
the DoD, which delineates areas authorized for overflight by US 
aircraft carrying nuclear weapons, and the specific security 
classification for overflight of foreign countries. 
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Survivability 


System High 
Security Mode 


Systems Security 

Engineering 
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Tactical Ferry 


Tactical Warning 
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(U) A separate and distinct source of power, internal to the site 
and in addition to the site’s primary electrical power source, 
normally an engine generator. 

(U) A document, developed for each nuclear weapon, that 
supplements the Military Characteristics by describing the 
logistical and operational environments that the nuclear weapon 
can encounter. It is developed through an evolutionary process 
beginning in Phase 1 and is a "living" document that is reviewed 
continuously and revised as required throughout the life of a 
nuclear weapon project. 

(U) The areas within the boundary fence, or outer boundary fence 
where two are installed, where nuclear weapons are retained for 
use elsewhere. 

(U) Weapon systeiii (ICBM. SLBM. and aircraft) that possess 
intercontinental range (greater than 5,500 km) and are capable of 
striking one or more enemy targets to satisfy US nuclear 
employment objectives. 

(U) See Joint Pub 1-02. 


(U) The total spectrum of procedures, facilities, equipment, 
personnel and weapon design features that provide for the safety, 
security, use control and rellabUity of the nuclear weapons 
stockpile. 

(U) The ability to withstand or repel attack, or other hostile 
action, to the extent that essential functions can continue or be 
resumed after onset of hostile action. 

(U) A mode of operation wherein all users having access to the 
Automated Information Systems possess a security clearance or 
authorization, but not necessarily a need-to-know. for all data 
handled by the Automated Information Systems. If the 
Automated Information Systems precesses special access 
information, all users must have formal access approval. 

(U) A element of system engineering that applies scientific and 
engineering principles to identify security vulnerabilities and 
minimize or contain risks associated with these vulnerabilities. 
SSE uses mathematical, physical, and related scientific 
disciplines, and the principles and methods of engineering design 
and analysis to specify, predict, and evaluate the vulnerability of 



(U) See Joint Pub 1-02. 
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Tamper Device 
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(U) To perform Intentionally .an Incorrect or unauthorized act 
that could cause prearming, arming, launching, firing, releasing, 
or detonation of a nuclear weapon or degradation of weapon 
performance. 


(U) Additional safeguards or protective mechanisms designed to 
prevent an Intruder from circumventing or "tampering" with in- 
place security systems. 

(U) Knowledge, however obtained, that would allow an individual 
to tamper with a nuclear weapon or nuclear component In a 
marmer that such tampering would not be detected during normal 
prefire operations or weapon-monitoring Inspections and could 
cause, then or later, unauthorized prearming, arming, launching, 
firing, releasing, or detonation of a nuclear weapon or 
degradation of weapon performzince. 

(U) Equipment, components, devices, and associated 
documentation or other media that pertain to cryptography or to 
the securing of telecommunications and automated information 
systems. 

(U) The preparation, transmission, communication, or related 
processing of Irxformation by electrical, electromagnetic, 
electromechanical, electro-optical, or electronic means. 


(U) An action or. order to terminate nuclear strikes previously 
authorized for execution. Inherent in the termination process is 
the relocking and/or recoding of applicable weapon systems by 
US weapon custodians at the earliest opportunity. 

(U) An act falling short of a military operation, or an omission, 
intended to cause physical damage or disruption in order to 
further a subversive political aim or to achieve an objective of a 
foreign power. Sabotage is distinguished from malicious damage 
by its motive. 


(U) A person not Included in the definition of cognizant agent. 
This may Include persons In the persormel reliability program. 
This does not allow, however, for two agents to be working 
together under the two-person rule or two-person control 
provisions. Having both members of a two-person control team 
voluntarily cooperating as agents Is considered improbable. 



(U) A hidden software or hardware mechanism that permits 
system protection mechanisms to be circumvented. It Is 
activated In some non-apparent manner, e.g., special "random" 
key sequence at a terminal. See also Back Door and Trap Door, 
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Tritium 


Trojan Horse 


Trusted Agent 
Trusted 

Computer System 


Trusted 

Computing Base 
(TCB) 


Trusted 

Ftmctionality 


Trusted Products 


Trusted Software 
Tuballoy (TU) 


Two-Man Rule / 
Two-Person Rule 


Two-Person 
Control (TPC) 
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tU) Tritium is a radioactive Isotope of hydrogen having one 
proton and two neutrons in the nucleus. Tritium is a beta 
emitter. 

(U) A computer program which contains hidden functions that 
surreptitiously exploit the legitimate functions of the program to 
the detriment of security. For example, making a 'Talind copy" of 
a sensitive file for the creator of the Trojem Horse. See also Back 
Door and Trap Door. 

(U) See cognizant agent and Insider. 

fU) A system with sufficient hardware and software integrity 
measures to allow its use for processing a range of sensitive or 
classified information. 

fU) The totality of protection mechanisms within a computer 
system -- including hardware, firmware, and software -- the 
combination of which is responsible for enforcing a security 
policy. It creates a basic protection environment and provides 
additional user services required for a trusted computer ^stem. 
The ability of a trusted computing base to correctly enforce a 
security policy depends solely on the mechanisms within the TCB 
and on the correct input by system administrative personnel of 
parameters (such as a user's security clearance) related to the 
security policy. 

(U) That which is determined to be correct with respect to some 
criteria, e.g., as established by security policy. The functionality 
shall neither fall short of nor exceed the criteria. 

(U) Products evaluated and approved for inclusion on the 
Evaluated Products List (EPL). 

(U) The software portion of a trusted computer base. 

(U) A term, of British origin, for uranium metal containing LI- 
238 and U-235 in natural proportions, therefore, the term is 
considered ambiguous and its use is discouraged. This term is 
sometimes applied to depleted uranium. See uranium. 

(U) A system designed to prohibit access by an individual to 
nuclear weapons and certain designated components by requiring 
the presence at all times of at least two authorized persons, each 
capable of detecting incorrect or unauthorized procedures with 
respect to the task to be performed. Also referred to as the Two- 
Man Concept or the Two-Man Policy. 

(U) The close surveillance and control of materials at all times 
by a minimum of two persons, each capable of detecting incorrect 
or unauthorized procedures with respect to the task to be 
performed and each familiar with established security 
requirements. 
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Two-Person 

Policy 


Unauthorized 

Access 
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Launch Analysis 
(ULA) 


Unauthorized 

Use 


(U) No lone individual shall have access to a nuclear weapon. 
During any operation that may require access to nuclear 
weapons, there shall be present a minimum of two authorized 
persons, each capable of detecting incorrect or unauthorized 
procedures with respect to the task to be performed and familiar 
with applicable safety and security requirements. Two authorized 
personnel shall be physically positioned where they can detect 
incorrect or unauthorized procedures with respect to the task or 
operation being performed. 

When application of the two-person policy is required, it shall be 
enforced by the persons who constitute the team during the entire 
period they are accomplishing the task or operation assigned and 
until they leave the area within which the two-person policy is 
required. 

Security procedures and equipment, intrusion detection systems, 
and security force personnel shall ensure positive identification 
and control of all persons entering Limited and Ebcclusion Areas. 
Entry control procedures shall ensure no lone individual is 
permitted in an Exclusion Area or to have access to a nuclear 
weapon. 

The only exceptions to the two-person policy shall be those 
specifically prescribed in approved nuclear weapon systems 
safety rules established in accordance with DoD Directive 3150.2. 

(U) The capability and opportunity to obtain, alter, or substitute 
positive control material used in the execution or release of 
nuclear or chemical weapons or to obtain, alter, or substitute the 
internal values of such material. A person authorized to handle 
positive control material does not have access if the ability to 
obtain, alter, or substitute the internal values is prevented 
through observation by authorized Individuals who are also 
authorized to handle positive control material, or by physical 
controls that prevent access. Physical control practices within 
the DCS and protective packaging methods employed by shippers 
prevent access to material by DCS and DCS-designated couriers 
and assistants. 

(U) Methodology for analyzing elements that can lead to an 
unauthorized use of a nuclear weapon. Identifies what a 
cognizant agent, outsiders, or combination of the two can do to 
bypass or defeat elements, components. subs)^stems. or systems to 
achieve a deliberate detonation, launch, release, transfer or 
termination. Methodology also applied to study of security of 
nuclear weapon storage sites. Not quantitative in nature because 
of inability to quantify human intent and actions. 

(U) A detonation. launch, release, or transfer for use of nuclear 
weapons, or termination of nuclear operations, not authorized by 
the President, resulting from a deliberate attempt by one or more 
individuals to circumvent critical elements of the nuclear 
command and control process. 
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pD) The achievement, by one nation, of a militarily significant 
technological capability which could materially alter the 
military balance with other nations resulting in an Increased 
likelihood of the use of nuclear weapons. 



(U) The act of inserting a previously set combination or code 
Into a positive control device so that arming, launching, or 
maintenance of a nuclear weapon or weapon system can occur. 
The act Is reversible. 



(U) Uranium is a heavy, silvery white, radioactive metal. In air, 
the metal becomes coated with a layer of oxide that will make It 
appear from a golden-yellow color to almost black. Uranium is 
an alpha emitter. 

(U) A citizen of the United States or a person who. though not a 
US citizen, owes permanent allegiance to the United States. Title 
8 U.S.C. 1408 provides detailed information as to identification 
of noncitizen US nationals. 



(U) The positive measures that, given access, allow the 
authorized use and prevent or delay unauthorized use of nuclear 
weapons, and Is accomplished through a combination of weapon 
system design features, operational procedures, and system safety 
rules. 

fU) Systems, devices, removeable components, and procedures 
which allow timely authorized use of a nuclear weapon while 
precluding or delaying unauthorized nuclear detonation. These 
measures are In addition to physical access controls which 
always apply to nuclear weapons. 
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tU) The total spectrum of devices, equipment, and procedures 
used to ensure authorized use, and to prevent unauthorized use. of 
nuclear weapons. Three principal methods of achieving use 
control have evolved over time: 

• (U) Separate secure storage of critical components. 

• (U) Permissive Action Links (PAL) for the nuclear weapon: or 

• (U) Coded control that prevents weapon prearming or weapon 
launch. 

fU) Stringent procedures play a fundamental role in each of these 
methods. 

(U) Components, subsystems, or systems and their implementing 
procedures that. In a nuclear warhead or nuclear weapon system, 
preclude or delay unauthorized nuclear detonation by: 

• (U) Disablement of the warhead causing it to be incapable of 
producing a significant nuclear yield without extensive nuclear 
package disassembly and repair of critical components: 

• (U) Removal and separate protection or destruction of 
components required to produce a nuclear detonation: and/or 

• (U) Physical security measures that deny or delay unauthorized 
access. 

(U) People or processes accessing an Automated Information 
Systems either by direct connections (l.e., via terminal) or 
indirect connections (i.e., prepare input data or receive output 
that is not reviewed for content or classification by a responsible 
individual). 

(U) Personnel who employ positive control material to issue or 
respond to an actual or exercise nuclear or chemical control 
order. 

(U) The COMSEC custodians responsible for the receipt, storage, 
accountability, and destruction of positive control material in 
direct support of the users. In small units, a using custodian may 
also be a user as long as the two-person control criterion is met. 
These persormel will be appointed in writing, in accordance with 
appropriate Service regulations. 
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(U) A team, composed of two mlUtaiy members (one "A" team 
member and one "B" team member) that verifies the operational 
combination placed In PAL devices. At least one of the two Is a 
commissioned or warrant officer; the other is grade E-7 or above. 
Verification is performed by personnel other than those who 
installed the combination or code and with equipment other than 
that used In the initial recode. 

(U) The opportunity to observe or identify, during the performance 
of assigned duties, the Internal values of positive control material 
when the material is being used for an authorized procedure. 

(U) A facility where real time assessment information concerning 
the actual cause of activation of sensor alarms is collected and 
acted upon. 

(U) The susceptibility of a weapon or its components to degradation 
from adverse environments, particularly the effects of a defensive 
nuclear burst. 

fU) An approved temporary deviation from the provisions of this 
manual that creates a security vulnerability. 

(U) That peirt of a missile, projectile, torpedo, rocket, or other 
munition whicfii contains either the nuclear or thermonuclear 
^stem, high explosive ^stem. chemical or biological agents, or 
Inert materials mtended to infilct damage. 

(U) A completely assembled warhead including appropriate skm 
sections and related components. 

(U) A saflng design technique that electrically and physically 
Isolates a weapon's firing circuits to ensure a predictable and 
desirable response of the electrical system In normal, abnormal, or 
accident environments. 

(U) The residue of a nuclear weapon after It has exploded or burned: 
that Is, the materials used for the casing, and other components of 
the weapon, plus imexpended plutonium or uranium, together with 
fission products, If any. 

(U) Includes a comprehensive assessment of the accident, 
neutralizing the weapon hazards, and removing, packaging, and 
shipping of the weapon hazards. 

(U) Pursuit and search for seized/stolen nuclear weapon(s) 
removed from site. 
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